Cyber - ServiceNow Security Operations (SecOps) - Manager - Consulting

EY is a global professional services organization that helps clients address complex cybersecurity threats and risks. The Manager will lead the assessment, architecture, design, implementation, and deployment of ServiceNow Security Operations solutions while managing projects, developing team members, advising clients, and supporting business development.

Responsibilities:

• As our ServiceNow Security Operations capabilities continue to grow, we are seeking a highly motivated Manager focused on ServiceNow SecOps architecture, design, build, and deployment – including leading end-to-end projects, developing resources/team members, and supporting pursuits/business development
• You will work with multi-disciplinary team members, within Cybersecurity and across other competencies, to help clients automate and mature their security operations and cyber risk programs utilizing ServiceNow Security Incident Response, Vulnerability Response, Configuration Compliance, Threat Intelligence, and related capabilities of the platform
• You will lead and coach team members, both onshore and offshore, including developing the functional and technical skillsets required to address our clients’ evolving needs
• In addition, you will support business development activities ranging from responding to proposals to fostering relationships and setting the stage for the next phases of work
• You will be expected to manage projects end-to-end working directly with our clients, including overseeing the day-to-day execution and interactions between our EY and client teams
• Strong project management skills to effectively lead a project from start to finish, including directly interacting with client teams and leading and motivating our EY team members
• Proactively engages with EY team members and clients as part of service delivery or as part of business development activities
• Foster an innovative and inclusive team-oriented work environment. You’ll play an active role in counselling and mentoring junior consultants within the firm
• Develop and foster relationships with client personnel at appropriate levels, including leading interactions with clients on a regular basis (e.g., workshops, meetings, interviews, status meetings, presentations)
• Consistently deliver quality client services, execute engagement quality and risk management processes, monitor progress, manage risk, and make certain that key stakeholders are kept informed about progress and expected outcomes
• Drive high-quality work products on your team within expected timeframes and budget
• Advise, challenge, and bring relevant insights to clients regarding:
• ServiceNow Security Operations solutions, use cases, and functionality, including experience from working with other clients
• ServiceNow security industry practices and roadmaps – where the technology capabilities are headed – to address our clients’ evolving threats, needs, and objectives
• How ServiceNow SecOps and other security technology capabilities fit into a client’s ecosystem (e.g., architecture, integrations with SIEM, SOAR, EDR, and vulnerability scanners)
• Enabling security operations and cyber risk processes utilizing security technology capabilities (e.g., incident response, vulnerability management, threat intelligence, continuous controls monitoring, analytics, emerging tech)
• Security technology solution architecture, including how ServiceNow capabilities support or connect with both upstream and downstream processes (as an example, vulnerability scanner findings connecting to remediation and change processes)
• Delivery models, including adjusting to or enabling a client’s preferred development life cycle (e.g., agile)
• Supporting security technology capabilities post go-live, whether transitioning to the client or positioning
• EY to provide ongoing support as part of a co-source or managed services delivery model
• Keep abreast of current business and industry trends related to both security technology and our clients’ business
• Demonstrate both functional and technical capabilities, professional knowledge, and the ability to assimilate new knowledge
• Support business development activities, including responding to proposals, developing level of effort/pricing estimates, contributing to or directly writing statements of work/change orders, and building client relationships
• Prepare and deliver client presentations regarding an array of topics ranging from recommending solutions, discussing potential approaches, or pitching new work – comfortable learning and working within Microsoft PowerPoint
• Lead and support client demonstrations of ServiceNow SecOps solutions – can coach the team and lead a demonstration of a solution enabled by technology (versus just demonstrating technology capabilities)
• Contribute to the development of innovative solutions and thought leadership, and support relevant internal initiatives and networking required to go-to-market and drive growth

Requirements:

• • A bachelor's degree in Computer Science, Information Systems, Cybersecurity, Business, Engineering, or a related field and 5 years of experience implementing ServiceNow Security Operations (SecOps), Security GRC, or IRM solutions/use cases
• • Alternatively, a Master's degree in Computer Science, Information Systems, Cybersecurity, Business, Engineering, or a related field and 4 years of work experience implementing ServiceNow Security Operations (SecOps), Security GRC, or IRM solutions/use cases
• • Certification from ServiceNow as a Certified System Administrator (CSA) and having completed the training and certification for Security Incident Response and/or Vulnerability Response (or other relevant certifications such as Security GRC/IRM Implementation, Threat Intelligence, Flow Design, UI Builder, Performance Analytics)
• • Experience leading a team to implement ServiceNow Security Operations functionality, including integrations with other systems (e.g., SIEM, SOAR, EDR, vulnerability scanners, threat intelligence feeds) using the Integration Hub or API functionality
• • Exposure and experience with cybersecurity and Governance, Risk, and Compliance principles and processes, including security incident response, vulnerability management, threat intelligence, configuration compliance, control frameworks, controls assessments, policies and procedures, and issues and exception management
• • Experience with the assessment, design, architecture, and implementation of security operations and cyber risk programs supported by enabling security technologies
• • Familiarity with Microsoft Office products (e.g., PowerPoint, Word, Excel, Visio), data analytics, and visualization tools
• • Awareness of recent ServiceNow releases (e.g., Vancouver, Washington, Xanadu, etc.) and functionality enhancements to the Security Operations and Security GRC solutions
• • Willingness to travel to meet client obligations (whether to EY or client locations)
• • Prior experience as a consultant or client-serving professional
• • Familiarity with Waterfall and Agile project delivery methodologies
• • Familiarity with performing integrations via APIs (e.g., REST, SOAP, etc.) and integration tools
• • Familiarity with security frameworks and concepts such as MITRE ATT&CK, NIST CSF, the vulnerability management lifecycle, and Indicators of Compromise (IOCs)
• • Familiarity with analytics and reporting tools (e.g., Spotfire, Power BI, Tableau)
• • An understanding of and implementation experience with a variety of security and GRC tools (e.g., ServiceNow SecOps/IRM, Splunk, Qualys, Tenable, Rapid7, CrowdStrike, Archer)
• • CISSP, CISA, CRISC, or other relevant certification desired
• • Big Four experience is a plus, with cybersecurity, IT risk, controls, risk management, compliance, or security operations experience