ServiceNow Integrated Risk Management & Continuous Authorization & Monitoring Specialist

The ServiceNow Integrated Risk Management & Continuous Authorization & Monitoring Specialist is a leased employee (part-time engagement) to be provided on a 100% remote basis for a duration of up to 24 months. Responsibilities: - Review, consult on, improve, and continue the development of existing integrations to centralize organizational-level common control, business system, and application-level assessment & authorization packages, including security control attestation and evidence collection. - Process Assessment and Optimization: Initiate and execute an independent project to assess the existing cybersecurity risk assessment process, current ticket assignment methodologies, prioritization, processing times, and average level of effort; examine workflows to optimize/refine processes and establish realistic processing expectancies for stakeholders based on request type. - Standardization and Documentation: Propose standardization improvements by helping establish cybersecurity risk documentation templates for stakeholders to use when initiating ServiceNow ticket requests more efficiently; review historical metrics to identify trends (e.g., peak submission times) and propose efficiencies to manage the ticket queue within resource constraints. - Stakeholder Collaboration: Collaborate directly with Client's Cybersecurity Awareness, Training, and Education program to raise user awareness regarding tickets requiring risk review; engage organizational stakeholders to ensure smooth process development and implementation across the organization for risk assessment functions. - Pilot Execution: Help execute the initial organizational pilot of the RMF process leveraging ServiceNow IRM and CAM modules, including the assignment and refinement of security control processes (organization-level, system-level, hybrid controls), security artifact/evidence requirements, and providing recommendations for continuous monitoring. - Governance Participation: Attend Client's weekly ServiceNow platform enhancement reviews and weekly ServiceNow change management review board meetings as needed to support change requests or new items brought forward by the Cybersecurity Risk Team. These meetings are supported remotely via MS Teams. Location: - 100% Remote. Arrangement: - Workdays Mon - Fri, 4 hours each day; Schedule between 8am and 5pm Pacific Time (Start and end times negotiable); Duration: 24-months (Start ASAP). Mandatory qualifications: - Minimum of four (4) years' experience developing, analyzing, and creating efficiencies within ServiceNow workflow processes. - Minimum of three (3) years' experience customizing Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) capabilities within ServiceNow to align with business objectives and risk appetite of mid to large-sized organizations. - Minimum of three (3) years' experience working within a governance, risk, and compliance (GRC) environment, with a proven track record of executing corporate projects and growth-based initiatives. - Minimum of three (3) years' experience working on cross-collaborative efforts, involving establishing partnerships between business units, independently analyzing and engaging organizational stakeholders as needed to ensure smooth process development and implementation across the organization for risk assessment functions. - Demonstrated experience developing professional templates to support organizational-level, cybersecurity-focused risk assessment processes. - Proposed resource must have a recent ServiceNow Integrated Risk Management (IRM) engagement with a minimum of three (3) years' experience and an active ServiceNow Continuous Authorization and Monitoring (CAM) engagement with a minimum of one (1) year continuous operation. - Must have strong foundational understanding of NIST's Cybersecurity and Risk Management Framework (CSF/RMF), including hands-on experience aligning CSF and RMF functions within ServiceNow IRM/CAM modules. Required Experience (additional emphasis): - The documents require a leased employee with a minimum of four (4) years' experience developing, analyzing, and creating efficiencies within ServiceNow workflow processes. - The candidate must have at least three (3) years' experience customizing IRM and CAM within ServiceNow to align with business objectives and risk appetite of mid to large-sized organizations. - The role also demands a minimum of three (3) years' experience working within a GRC environment, executing corporate projects, and engaging organizational stakeholders for risk assessment functions. - Furthermore, the candidate must have demonstrated