Senior Security Analyst

If you have questions while submitting an application, please review these frequently asked questions . Current Employees and Students: If you are currently employed or enrolled as a student at The Ohio State University, please log in to Workday to use the internal application process. Welcome to The Ohio State University's career site. We invite you to apply to positions of interest. In order to ensure your application is complete, you must complete the following: Ensure you have all necessary documents available when starting the application process. You can review the additional job description section on postings for documents that may be required. Prior to submitting your application, please review and update (if necessary) the information in your candidate profile as it will transfer to your application. Job Title: Senior Security Analyst Department: OTDI | Governance and Risk Management Senior Security Analyst Position Summary The Senior Security Analyst is a high-impact, specialized position within The Ohio State University's Office of Technology and Digital Innovation. This role is responsible for designing, managing, and evolving the comprehensive information security and privacy framework across the university and medical center. Operating with a high degree of autonomy, the Senior Security Analyst will apply advanced industry knowledge to solve highly complex problems, develop new risk models, establish precedents that safeguard the university's academic, research, and administrative environments, and lead technical focus groups to determine the applicability of industry standards to university business. Key Responsibilities Own and operate the university's Information Security and Privacy Control Requirements (ISPCR), ensuring alignment with institutional goals. Map institutional policies and controls to industry standards and regulatory requirements, such as NIST SP 800-53, NIST SP 800-171, CIS Benchmarks, HIPAA, FERPA, GLBA, and PCI-DSS. CIS Controls, ISO/IEC 27001, SOC 2, HIPAA, FERPA, GLBA, PCI DSS, or similar. Develop, refine, and implement new compliance practices, processes, maturity models, and key performance metrics to measure framework effectiveness over time. Lead highly complex, large-scope risk assessment initiatives that have a significant and long-term impact on the university's risk posture. Scope, execute, and oversee Tier 1, Tier 2, and Tier 3 risk assessments, evaluating critical campus infrastructure, cloud environments, third-party vendors, and research data environments. Provide actionable, technically sound mitigation strategies to system owners, researchers, and technical teams to remediate identified gaps. Provide guidance, mentorship, and technical oversight to less experienced colleagues across the distributed university IT and security organizations. Convey difficult, highly complex, or sensitive risk information to diverse campus stakeholders and leadership, from technical system administrators to non-technical academic leadership. Facilitate productive dialogue and use advanced communication skills to persuade others to adopt secure practices and consider alternative risk-treatment options. Required Education & Experience Bachelor's degree in information technology, cyber security, computer science, or a related field (or equivalent professional experience). Minimum of 6 years of direct experience in information security governance, risk, and compliance. Full technology stack knowledge – broad understanding and ability to explain identity and access management (IAM), server, networking, application development and database concepts. Preferred Education & Experience 8 to 12 years of relevant governance, risk, and compliance (GRC) experience, ideally within a higher education, academic medical center, or highly decentralized corporate environment. Advanced degree (master's or equivalent) in a relevant technical or business field. Active professional certifications such as CISA, CRISC, CISM, CISSP, or equivalent specialized GRC certifications. Deep specialization in NIST SP 800-53 and HIPAA Security/Privacy Rules. Thorough understanding of how these controls apply to diverse IT environments (on-premises, cloud, SaaS). Full technology stack experience – provides expert guidance to securely implement IAM, server, networking, application development and database services. Function: Information Technology Subfunction: Information Security and Risk Management Career Band: Individual Contributor - Specialized Proposed Career Level: S4 Additional Information: The salary range for this position is $103,000 -$134,500 and the offer for this position will be based on internal equity and the candidate's qualifications. Function: Information Technology Sub-function: Information Security and Risk Management Career Band: Individual Contributor - Specialized Career Level: S4 Location: Mount Hall (0311) Position Type: Regular Scheduled Hours: 40 Shift: First Shift Final candidates are subject to successful completion of a background check. A drug screen or physical may be required during the post offer process. Thank you for your interest in positions at The Ohio State University and Wexner Medical Center. Once you have applied, the most updated information on the status of your application can be found by visiting the Candidate Home section of this site. Please view your submitted applications by logging in and reviewing your status. For answers to additional questions please review the frequently asked questions . The university is an equal opportunity employer, including veterans and disability. About The Ohio State University The Ohio State University, one of the biggest and most comprehensive universities in the country, creates experiences that bring together expertise, ideas and resources to improve communities locally and globally. Ohio State is regularly honored as one of the nation's top 20 public universities. With campuses and research centers throughout the state, the institution's unrivaled depth and breadth advance innovation, health care and research within Ohio's communities. For more than 150 years, Ohio State has inspired the next generation of leaders, discovering groundbreaking medical breakthroughs and finding solutions to the problems the world is facing now. Ohio State also has a top-rated academic medical center and a premier cancer hospital and research center. Ohio State offers more than 200 majors and programs — plus 500 specializations — for undergraduates, in addition to more than 230 master's, doctoral and professional degree programs and an estimated 12,000 course offerings. Join Ohio State's Community At The Ohio State University, we connect people, ideas and resources to put knowledge into practice and create meaningful impact in people's lives. Buckeyes lead with purpose. We advance excellence and inspire people to join in and take action. Together, we'll create meaningful impact at a scale few others can match. Explore our Extensive Benefits Ohio State provides access to opportunities and resources for all employees. Starting your first day, Ohio State offers you a comprehensive benefits package. WORK-LIFE: Flexible and remote work arrangements where applicable, child care program, and access to educational, athletic and cultural events. RETIREMENT: State pension and alternative options with competitive employer contributions, as well as optional supplemental plans. HEALTH: Medical, dental, vision and prescription coverage, life insurance, flexible spending accounts and wellness programming. TIME OFF: Paid vacation and sick time, parental and medical leave plus 11 paid holidays. Short and long-term disability options also available. FINANCIAL: Tuition assistance for employees and their dependents, adoption assistance, and discounts with preferred vendors and university partners. WELLNESS: Lifestyle spending account, employee assistance program, health reimbursement account, and employee wellness program.