ServiceNow Integrated Risk Management & Continuous Authorization & Monitoring Specialist
Remote (Pacific Time)
24 Months
Mandatory Requirements
· Minimum of four (4) years' experience developing, analyzing, and creating efficiencies within ServiceNow workflow processes.
· Minimum of three (3) years' experience customizing Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) capabilities within ServiceNow to align with business objectives and risk appetite of mid to large-sized organizations.
· Minimum of three (3) years' experience working within a governance, risk, and compliance (GRC) environment, with a proven track record of executing corporate projects and growth-based initiatives.
· Minimum of three (3) years' experience working on cross-collaborative efforts, involving establishing partnerships between business units, independently analyzing and engaging organizational stakeholders as needed to ensure smooth process development and implementation across the organization for risk assessment functions.
· Demonstrated experience developing professional templates to support organizational-level, cybersecurity-focused risk assessment processes.
· Proposed resource must have a recent ServiceNow Integrated Risk Management (IRM) engagement with a minimum of three (3) years’ experience and an active ServiceNow Continuous Authorization and Monitoring (CAM) engagement with a minimum of one (1) year continuous operation.
· Must have strong foundational understanding of NIST's Cybersecurity and Risk Management Framework (CSF/RMF), including hands-on experience aligning CSF and RMF functions within ServiceNow IRM/CAM modules.
Desirable Qualifications
· ServiceNow Practitioner Implementer or above (e.g. Professional Implementer)
· ServiceNow Certified System Administrator (CSA)
· ServiceNow GRC: Integrated Risk Management (IRM) Implementer
· ServiceNow Certified Technical Architect (CTA)
· ISC2 Certified Information Systems Security Professional (CISSP)
· ISC2 Certified – Governance Risk and Compliance (CGRC) or Certified Authorization Professional (CAP)
· ISACA Certified Information Security Manager (CISM)
· ISACA Certified in Risk and Information Systems Control (CRISC)
· CompTIA Certified Advanced Security Practitioner (CASP+)
· CompTIA Security +
· B.S. Computer Science (CS), Management of Information Systems (MIS), or Cybersecurity from an accredited university.
Assumptions
· Contractors must have reliable internet, work exclusively within the United States.
· Contractor's work schedule will fall between 8am and 5pm Pacific Time. Workdays are Mon - Fri (4hrs each day). Start and end times are negotiable (example: 9am to 1:00pm).
· The contractor is expected to be 100% remote.
· The resource working on this task will have strong communication, written and collaboration skills, with the ability to communicate highly technical information to project team both verbally and in writing.
