Mandatory RequirementsMinimum of four (4) years' experience developing, analyzing, and creating efficiencies within ServiceNow workflow processes. Minimum of three (3) years' experience customizing Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) capabilities within ServiceNow to align with business objectives and risk appetite of mid to large-sized organizations. Minimum of three (3) years' experience working within a governance, risk, and compliance (GRC) environment, with a proven track record of executing corporate projects and growth-based initiatives. Minimum of three (3) years' experience working on cross-collaborative efforts, involving establishing partnerships between business units, independently analyzing and engaging organizational stakeholders as needed to ensure smooth process development and implementation across the organization for risk assessment Demonstrated experience developing professional templates to support organizational-level, cybersecurity-focused risk assessment processes. Proposed resource must have a recent ServiceNow Integrated Risk Management (IRM) engagement with a minimum of three (3) years experience and an active ServiceNow Continuous Authorization and Monitoring (CAM) engagement with a minimum of one (1) year continuous operation. Must have strong foundational understanding of NIST's Cybersecurity and Risk Management Framework (CSF/RMF), including hands-on experience aligning CSF and RMF functions within ServiceNow IRM/CAM modules. Desirable QualificationsServiceNow Practitioner Implementer or above (e.g. Professional Implementer) ServiceNow Certified System Administrator (CSA) ServiceNow GRC: Integrated Risk Management (IRM) Implementer ServiceNow Certified Technical Architect (CTA) ISC2 Certified Information Systems Security Professional (CISSP) ISC2 Certified Governance Risk and Compliance (CGRC) or Certified Authorization Professional (CAP) ISACA Certified Information Security Manager (CISM) ISACA Certified in Risk and Information Systems Control (CRISC) CompTIA Certified Advanced Security Practitioner (CASP+) CompTIA Security + S. Computer Science (CS), Management of Information Systems (MIS), or Cybersecurity from an accredited university.