ServiceNow Integrated Risk Management & Continuous Authorization and Monitoring Specialist - 26-14986

ServiceNow Integrated Risk Management & Continuous Authorization and Monitoring Specialist
Location: Sacramento, CA (Remote)
Duration: 24 months
Schedule: Monday to Friday, 4 hours per day, between 8am and 5pm Pacific Time (start and end times negotiable, e.g., 9am to 1pm)
Employment Type: Contract (NO BENEFITS)

Job Summary
We are seeking a qualified resource to support the continued build-out and maturing of ServiceNow’s Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) modules. This initiative will help better align the organization’s Cybersecurity Risk Program with NIST’s Cybersecurity and Risk Management Frameworks (CSF/RMF).

The resource will provide technical database administrator and developer assistance to review, consult, improve upon, and continue development of the existing ServiceNow integration. The goal is to centralize organizational-level common controls and business system and application-level assessment and authorization packages, including security control attestation and supporting documentation and evidence collection.

The resource should have a strong understanding of NIST CSF and RMF and be familiar with navigating Security and Privacy Controls for Information Systems and Organizations (NIST SP 800-53). Technical assistance is also needed to modify existing ServiceNow workflows maintained by other business areas and to create new workflows that improve Cybersecurity Risk Team processes.

Responsibilities

• Initiate and execute an independent project assessing the existing cybersecurity risk assessment process, including ServiceNow Cybersecurity Risk ticket assignment, ticket types, prioritization, processing times, and average level of effort (hours and stakeholder collaboration) required to resolve tickets
• Examine the current assignment workflow within the existing ServiceNow deployment, with a focus on optimizing and refining processes and establishing realistic processing expectations for stakeholders by request type
• Review the information requested to process a ServiceNow ticket, and propose standardization improvements, including cybersecurity risk documentation templates for stakeholders to use when initiating requests that require risk assessments
• Review historical ticket processing metrics to identify trends, such as peak submission periods, and propose efficiencies for managing the risk ticket queue given limited personnel
• Present proposed recommendations to Cybersecurity Department Leadership for review and approval, and document approved recommendations in a process methodology that defines expected processing timelines, minimum ticket entrance criteria, and best practices for ticket submissions
• Collaborate with the Cybersecurity Awareness, Training, and Education program to determine the best approach to raise awareness among users planning to submit tickets that require cybersecurity risk review
• Help execute the initial organizational pilot of the RMF process using ServiceNow IRM and CAM, including assignment and refinement of the security control process (organization-level, system-level, and hybrid controls) and security artifact and evidence requirements
• Develop template and example documentation and job aids for organizational stakeholders
• Provide recommendations for executing continuous monitoring using ServiceNow IRM
• Modify existing ServiceNow workflows and create new workflows to support Cybersecurity Risk Team process efficiencies
• Attend weekly ServiceNow platform enhancement reviews and weekly ServiceNow change management review board meetings as needed (held remotely via MS Teams)

Mandatory Requirements

• Minimum of 4 years of experience developing, analyzing, and creating efficiencies within ServiceNow workflow processes
• Minimum of 3 years of experience customizing IRM and CAM capabilities within ServiceNow to align with the business objectives and risk appetite of mid- to large-sized organizations
• Minimum of 3 years of experience working within a governance, risk, and compliance (GRC) environment, with a proven track record of executing corporate projects and growth-based initiatives
• Minimum of 3 years of experience on cross-collaborative efforts, including establishing partnerships between business units and independently engaging stakeholders to ensure smooth process development and implementation for risk assessment functions
• Demonstrated experience developing professional templates to support organizational-level, cybersecurity-focused risk assessment processes
• A recent ServiceNow IRM engagement with a minimum of 3 years of experience, and an active ServiceNow CAM engagement with a minimum of 1 year of continuous operation
• Strong foundational understanding of NIST CSF and RMF, including hands-on experience aligning CSF and RMF functions within ServiceNow IRM/CAM modules

Desirable Qualifications

• ServiceNow Practitioner Implementer or above (e.g., Professional Implementer)
• ServiceNow Certified System Administrator (CSA)
• ServiceNow GRC: Integrated Risk Management (IRM) Implementer
• ServiceNow Certified Implementation Specialist, Risk and Compliance
• ServiceNow Certified Technical Architect (CTA)
• ServiceNow Certified Application Developer
• ISC2 Certified Information Systems Security Professional (CISSP)
• ISC2 Certified in Governance, Risk and Compliance (CGRC) or Certified Authorization Professional (CAP)
• ISACA Certified Information Security Manager (CISM)
• ISACA Certified in Risk and Information Systems Control (CRISC)
• CompTIA Advanced Security Practitioner (CASP+)
• CompTIA Security+
• B.S. in Computer Science, Management of Information Systems, or Cybersecurity from an accredited university