Senior Security & GRC Leader

Ohio State University; Columbus (OH); On-site; USD 103,000 - 135,000; Full time

Job summary

The Ohio State University seeks a Senior Security Analyst to design, manage, and evolve the information security and privacy framework for the university and medical center. You will lead risk assessments, map controls to industry standards, and guide secure practices across campus.

This high-impact role requires deep GRC expertise, mentoring, and the ability to communicate complex risk to diverse stakeholders. Location is Mount Hall, with a standard 40-hour week and background check.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 6+ years of information security governance, risk, and compliance.
• Strong understanding of IAM, networking, servers, and databases.

Responsibilities

• Own ISPCR controls and align with institutional goals.
• Map policies to NIST SP 800-53, 800-171, HIPAA, FERPA, PCI-DSS, ISO/IEC 27001, SOC 2.
• Develop compliance processes, maturity models, and KPIs.
• Lead Tier 1–3 risk assessments across campus infrastructure and vendors.
• Provide actionable mitigation and guidance to stakeholders.
• Mentor colleagues across distributed IT and security teams.
• Communicate risk clearly to technical and non-technical leadership.
• Drive dialogue to adopt secure practices and risk-treatment options.

Skills

GRC

Information Security

Risk Assessment

IAM

Policy Mapping

Education

Bachelor's degree

Master's degree

Job description

The Ohio State University seeks a Senior Security Analyst to design, manage, and evolve the information security and privacy framework for the university and medical center. You will lead risk assessments, map controls to industry standards, and guide secure practices across campus.

This high-impact role requires deep GRC expertise, mentoring, and the ability to communicate complex risk to diverse stakeholders. Location is Mount Hall, with a standard 40-hour week and background check.