Information Technology Security Analyst

Work Location : 50 W. Town Street, Columbus, OH 43215 Work Schedule: Onsite Monday through Friday (5 Days/Week). Duration: Long-Term Contract Direct client: Job Summary Our direct client seeking an experienced IT Security Analyst 3 to support enterprise cybersecurity, governance, risk management, compliance (GRC), and security operations. The consultant will work closely with the Agency Information Security Officer (AISO), IT Risk & Security Manager, Privacy Officer, infrastructure teams, project managers, business stakeholders, and vendors to strengthen ODM's cybersecurity posture and ensure compliance with federal and state security standards. Responsibilities Support ODM cybersecurity, governance, risk management, compliance, and security operations initiatives. Conduct security risk assessments and security reviews for applications, infrastructure, cloud platforms, and third-party vendors. Perform vendor security assessments, SOC report reviews, security questionnaires, and architecture evaluations. Support compliance with NIST, CMS,

HIPAA

, MARS-E/ARC-AMP-E, IRS Publication 1075, and other regulatory requirements. Participate in audit preparation, evidence collection, remediation tracking, and corrective action planning. Identify security risks and collaborate with technical and business teams on mitigation strategies. Support Governance, Risk & Compliance (GRC) programs, policies, standards, and procedures. Assist with vulnerability management, continuous monitoring, incident response coordination, and security operations. Review cloud environments, enterprise architecture, and third-party integrations for security compliance. Track security findings, vulnerabilities, POA&Ms, and remediation activities. Implement and maintain NIST-aligned security controls. Develop security documentation, executive reports, compliance artifacts, and security metrics. Participate in SDLC to ensure security requirements are incorporated throughout project implementation. Provide security consultation for enterprise applications, cloud services, and emerging technologies. Required Qualifications Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or a related field. 5+ years of experience in Cybersecurity, Information Security, Governance, Risk Management, or Compliance. 3+ years conducting: Security Risk Assessments Vendor Security Reviews Compliance Evaluations Experience supporting: NIST CMS HIPAA

MARS-E / ARC-AMP-E

IRS Publication 1075 Experience with Governance, Risk & Compliance (GRC). Experience with: Vulnerability Management Audit Readiness Evidence Collection Remediation Tracking Experience reviewing: Third-Party Integrations Excellent analytical, communication, documentation, and organizational skills. Preferred Qualifications CISSP, CISM, CISA, Security+, CGRC, or equivalent certification. Experience with Azure, AWS, or Google Cloud Security. SIEM and Security Monitoring experience. Third-Party Risk Management experience. Medicaid or State Government security experience. #J-18808-Ljbffr Comtech Global