Senior Security Analyst - Risk, Compliance & Privacy Lead

Ohio State University; North Carolina; On-site; USD 103,000 - 135,000; Full time

Job summary

The Ohio State University is seeking a Senior Security Analyst within the Office of Technology and Digital Innovation to design, manage, and evolve the university's information security and privacy framework across campus and medical center, operating with autonomy.

This role leads risk assessments, maps controls to NIST SP 800-53 and related standards, develops mitigation strategies, and mentors staff while presenting complex risk to technical and academic leadership.

Qualifications

• Bachelor's degree in information technology, cyber security, computer science, or a related field.
• Minimum of 6 years of direct experience in information security governance, risk, and compliance.
• Full technology stack knowledge with IAM, server, networking, application development, and database concepts.

Responsibilities

• Own and operate the university's ISPCR, ensuring alignment with institutional goals.
• Map policies and controls to industry standards and regulatory requirements (NIST SP 800-53, NIST SP 800-171, CIS Benchmarks, HIPAA, FERPA, GLBA, PCI-DSS, CIS Controls, ISO/IEC 27001, SOC 2).
• Develop, refine, and implement new compliance practices, processes, maturity models, and KPIs to measure framework effectiveness.
• Lead complex risk assessment initiatives affecting the university's risk posture.
• Scope, execute, and oversee tiered risk assessments (Tier 1-3) across campus infrastructure and vendors.
• Provide actionable mitigation strategies to system owners and technical teams.
• Offer guidance and mentorship to colleagues across distributed IT and security groups.
• Communicate risk information to diverse stakeholders and leadership with clarity.
• Facilitate dialogue and promote secure practices and risk-treatment options.

Skills

Information security governance

Risk assessment

Compliance

Communication

Mentorship

Stakeholder management

Education

Bachelor's degree in information technology/cyber security/computer science

Master's degree or equivalent

CISA

CRISC

CISM

CISSP

Job description

The Ohio State University is seeking a Senior Security Analyst within the Office of Technology and Digital Innovation to design, manage, and evolve the university's information security and privacy framework across campus and medical center, operating with autonomy.

This role leads risk assessments, maps controls to NIST SP 800-53 and related standards, develops mitigation strategies, and mentors staff while presenting complex risk to technical and academic leadership.