IT Security Analyst 3

• Location: Columbus OH
• Duration: 8+ Months

Essential Requirements:

• The selected consultant must possess the technical knowledge, professional experience, and communication skills necessary to support the Ohio Department of Medicaid's cybersecurity, governance, risk management, compliance, and security operations initiatives. The consultant must be capable of working independently while collaborating effectively with technical teams, business stakeholders, executive leadership, vendors, and external partners in a fast-paced government environment.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field preferred.
• Minimum 5 years of professional experience in cybersecurity, information security, governance, risk management, or compliance.
• Minimum 3 years conducting security risk assessments, vendor security reviews, or compliance evaluations.
• Experience supporting NIST, CMS, HIPAA, ARC-AMP-E/MARS-E, IRS Publication 1075, or comparable frameworks.
• Experience supporting Governance, Risk, and Compliance (GRC) programs.
• Experience with vulnerability management, audit readiness, evidence collection, remediation tracking, and continuous monitoring.
• Experience reviewing cloud technologies, enterprise architecture, and third-party integrations.
• Strong analytical, documentation, communication, and organizational skills.

Desired Skill Sets:

• CISSP, CISM, CISA, Security+, CGRC, or equivalent certification preferred.
• Experience with Azure, AWS, or Google Cloud security.
• Experience with SIEM technologies and security monitoring.
• Experience performing vendor security assessments and third-party risk management.
• Knowledge of Medicaid systems or state government security practices preferred.
• Experience supporting Agile project environments.
• Excellent written and verbal communication skills.
• Strong leadership, analytical thinking, and problem-solving abilities