Lead ServiceNow Security and Data Protection Engineer

What you'll do

• Own platform access governance including roles, groups, ACLs, privileged access, and entitlement management.
• Define, implement, and validate security controls to meet regulatory, audit, and enterprise requirements.
• Lead internal and external audits, risk assessments, and evidence collection for platform security.
• Perform security reviews for platform changes, upgrades, integrations, and architectural designs.
• Manage encryption, key management, data masking, data classification, and DLP controls.
• Own platform security monitoring, logging, detection use cases, and incident response activities.
• Govern security, privacy, and compliance requirements for Now Assist and other AI-enabled capabilities.
• Lead identity and authentication services including SSO, MFA, and Zero Trust capabilities.

What we're looking for

• ServiceNow Certified System Administrator (CSA) certification.
• 7+ years of ServiceNow platform engineering, administration, architecture, or implementation experience.
• 6+ years designing and managing access governance models, including ACL design and least-privilege enforcement.
• 5+ years leading platform security initiatives, including risk evaluation and protection of sensitive enterprise data.
• 4+ years supporting regulated or audited applications, including control validation and audit evidence production.
• 3+ years developing solutions using JavaScript, Glide API, OAuth, SAML, MFA, and encryption.
• 3+ years administering privileged access management capabilities and automated access lifecycle controls.
• 2+ years managing security backlogs and roadmaps in Agile environments.
• Bachelor’s degree from an accredited university or equivalent work experience (High School Diploma/GED plus 4 years of relevant experience).
• ServiceNow security certifications (CIS-SIR, CIS-VR, or CIS-GRC) and/or industry certifications (CISSP or CISM) (preferred).
• Experience with SIEM platforms (preferably Splunk), certificate lifecycle management, and SaaS Security Posture Management (SSPM) (preferred).
• Working knowledge of HIPAA, SOX, SOC 2, ISO 27001, and NIST frameworks (preferred).