Supply Chain Cyber Risk Analyst – Procurement Focus

Smart Cloud Solution; Kentucky; On-site; USD 90,000 - 120,000; Full time

Job summary

Smart Cloud Solution in the Columbus area is seeking an IT Security Analyst (Supply Chain Risk Consultant) to conduct cybersecurity risk assessments for software requests and renewals, document findings in OneTrust, and ensure workflow integration with ServiceNow and Ohio Buys.

The role collaborates with procurement, IT, and business units, analyzes requirements, drafts risk comments, and supports process mapping and metrics reporting to improve efficiency and reduce duplication.

Qualifications

• Experience with cybersecurity risk assessment and third-party risk tools (e.g., OneTrust).
• Familiarity with IT procurement workflows and platforms (ServiceNow, Ohio Buys).
• Strong documentation and communication skills.
• Ability to work across departments and manage multiple requests.
• Ability to rapidly iterate as processes evolve.

Responsibilities

• Perform cybersecurity risk assessments for software procurement and renewals.
• Enter and manage risk assessment data in OneTrust and ServiceNow.
• Provide comments and documentation for Ohio Buys requisitions.
• Collaborate with business units, procurement, and IT groups to clarify requirements.
• Support process mapping and improvement initiatives to reduce workflow duplication.
• Track and report metrics on workload, turnaround times, and resource needs.

Skills

Cybersecurity risk assessment

IT procurement workflows

Documentation & communication

Cross‑department collaboration

Process adaptation

Tools

OneTrust

ServiceNow

Ohio Buys

Job description

Smart Cloud Solution in the Columbus area is seeking an IT Security Analyst (Supply Chain Risk Consultant) to conduct cybersecurity risk assessments for software requests and renewals, document findings in OneTrust, and ensure workflow integration with ServiceNow and Ohio Buys.

The role collaborates with procurement, IT, and business units, analyzes requirements, drafts risk comments, and supports process mapping and metrics reporting to improve efficiency and reduce duplication.