[Hiring] ServiceNow Developer @ExecRecruitment

Role Description

SMUD is issuing this Request for Proposal to engage a qualified resource to provide a leased employee to support our continued build out and maturing of ServiceNow's Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) modules. This initiative will help to better align SMUD's Cybersecurity Risk Program with NIST's Cybersecurity and Risk Management Frameworks (CSF/RMF).

The leased employee will provide:

• Technical database administrator and developer assistance in maturing the development of ServiceNow's Continuous Authorization and Monitoring (CAM) module.
• Technical expertise to review, consult, improve upon, and continue development of existing integration.
• Support for modification of existing ServiceNow workflows and creation of new workflows to enhance Cybersecurity Risk Team process efficiencies.
• Regular attendance at SMUD's weekly ServiceNow platform enhancement reviews and change management review board meetings.

Proposals should outline:

• Technical qualifications and experience with ServiceNow CAM module integration work.
• Understanding of NIST CSF and RMF.
• ServiceNow platform specific qualifications such as Certified Implementation Specialist – Risk and Compliance, GRC Integrated Risk Management (IRM) Implementer, Certified Technical Architect, Certified Application Developer, etc.

The resource shall provide all labor and material required to plan and facilitate this leased employee request for a ServiceNow Process Integrated Risk Management/Continuous Authorization and Monitoring (IRM/CAM) Buildout and Cybersecurity Risk Management Queue Optimization to support NIST Risk Management Framework Implementation.

The resource will be responsible for:

• Initiating and executing an independent project focused on assessing the existing cybersecurity risk assessment process at SMUD.
• Examining the current methodology of ServiceNow Cybersecurity Risk ticket assignment, ticket types, prioritization, processing times, and effort required to resolve/close tickets.
• Proposing standardization improvements for cybersecurity risk documentation templates for SMUD stakeholders.
• Reviewing historical ServiceNow Cybersecurity Risk ticket processing metrics to identify trends and propose efficiencies.
• Collaborating with SMUD's Cybersecurity Awareness, Training, and Education program to raise awareness for users submitting tickets.
• Executing the initial organizational pilot of the RMF process leveraging ServiceNow IRM and CAM modules.

The leased employee will be required to attend:

• SMUD's weekly ServiceNow platform enhancement reviews.
• Weekly ServiceNow change management review board meetings as needed.

Qualifications

• Minimum of four (4) years' experience developing, analyzing, and creating efficiencies within ServiceNow workflow processes.
• Minimum of three (3) years' experience customizing Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) capabilities within ServiceNow.
• Minimum of three (3) years' experience working within a governance, risk, and compliance (GRC) environment.
• Minimum of three (3) years' experience working on cross-collaborative efforts.
• Demonstrated experience developing professional templates for cybersecurity-focused risk assessment processes.
• Proposed resource must have a recent ServiceNow Integrated Risk Management (IRM) engagement with a minimum of three (3) years’ experience.
• Must have strong foundational understanding of NIST's Cybersecurity and Risk Management Framework (CSF/RMF).

Requirements

• ServiceNow Practitioner Implementer or above (e.g. Professional Implementer).
• ServiceNow Certified System Administrator (CSA).
• ServiceNow GRC: Integrated Risk Management (IRM) Implementer.
• ServiceNow Certified Technical Architect (CTA).
• ISC2 Certified Information Systems Security Professional (CISSP).
• ISC2 Certified – Governance Risk and Compliance (CGRC) or Certified Authorization Professional (CAP).
• ISACA Certified Information Security Manager (CISM).
• ISACA Certified in Risk and Information Systems Control (CRISC).
• CompTIA Certified Advanced Security Practitioner (CASP+).
• CompTIA Security+.
• B.S. in Computer Science (CS), Management of Information Systems (MIS), or Cybersecurity from an accredited university.

Benefits

• Long-Term Stability: Join us on multi-year opportunities with room to grow.
• Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
• Future Planning: Enroll in our 401(k) program and invest in your financial security.
• GC Assistance: We support immediate Green Card processing, if required.