New 2960X doesn't have a mgmt port can I hang a port off the Nexus 9k, details inside.

I have a 2960X which will be used to take a circuit link and switch it off to two firewalls.

I made a huge bad and ordered this switch not realizing there is no mgmt.

Essentially port 1 will be the circuit link itself, port 2 to firewall 1 and port 3 to firewall 2

could i just take port 8, make it an access port to vlan 200 (mgmt vlan host on 9k)

set IP on vlan 200 to 192.168.1.150 on the 2960 and then connect it to an access port for vlan 200 on the 9k.

I think this will work, but am I at risk for any security violations?