Supply Chain Risk Consultant

The Supply Chain Risk Consultant is responsible for conducting risk assessments for new software requests and renewals, documenting findings in OneTrust, and ensuring proper workflow integration with ServiceNow and Ohio Buys. Demonstrate knowledge of vulnerability assessments, intrusion prevention and detection, access control and authorization, policy enforcement, secure infrastructure design, protocol analysis, and firewalls.

Job Title: Supply Chain Risk Consultant
Contract Duration: 8 months, possible extension
Location: Columbus, OH
Work Arrangement: Hybrid
Pay Range: $37 - $42 per hour

Summary
The Supply Chain Risk Consultant is responsible for conducting risk assessments for new software requests and renewals, documenting findings in OneTrust, and ensuring proper workflow integration with ServiceNow and Ohio Buys.

Responsibilities

• Perform cybersecurity risk assessments for software procurement and renewals.
• Enter and manage risk assessment data in OneTrust and ServiceNow.
• Provide comments and documentation for Ohio Buys requisitions as required.
• Collaborate with business units, procurement, and IT groups to clarify requirements and process steps.
• Support process mapping and improvement initiatives to reduce workflow duplication.
• Track and report metrics on workload, turnaround times, and resource needs.
• Perform user security administration and provisioning for Active Directory and application-level accounts, including permissions, additions, changes, terminations, and deletions.
• Provide users and management with technical support related to access control.
• Implement security improvements by assessing current situations, evaluating trends, and anticipating requirements.
• Perform updates to security applications and devices.
• Identify security violations and inefficiencies through periodic audits.
• Act as a technical information security reviewer of performance reports, system status reports, operating procedure manuals, and other related documents.
• Assist with the selection and installation of automated tools that enforce or monitor compliance with information security policies, standards, procedures, and related requirements.
• Demonstrate knowledge of vulnerability assessments, intrusion prevention and detection, access control and authorization, policy enforcement, secure infrastructure design, protocol analysis, and firewalls.

Experience & Education

• Years of Relevant Experience: 1-3 years of experience in the field or a related area.
• Preferred Education: Four-year college degree or equivalent technical study.

Required Skills

• Experience with cybersecurity risk assessment and third-party risk tools (e.g., OneTrust)
• Familiarity with IT procurement workflows and platforms (ServiceNow, Ohio Buys).
• Strong documentation and communication skills.
• Ability to work collaboratively across departments and manage multiple requests.
• The position may require rapid iteration and adaptation as processes evolve.

#LI-MS1