Cybersecurity Risk Analyst (ServiceNow) - On W2

Key Responsibilities

· Evaluate, assess, and monitor cybersecurity and third-party risk activities in alignment with organizational risk management objectives.

· Partner with business stakeholders to gather, analyze, and document business requirements for risk management processes and technology solutions.

· Develop business use cases, user stories, process maps, and functional requirements to support cybersecurity and GRC initiatives.

· Manage and prioritize enhancement requests, ensuring business needs are clearly documented and translated into actionable development requirements.

· Coordinate and execute system testing activities, including test strategy development, test script creation, user acceptance testing (UAT), defect tracking, and validation of implemented solutions.

· Collaborate with technical teams to support solution design, implementation, and deployment activities.

· Analyze existing workflows and identify opportunities to improve operational efficiency, data quality, automation, and user experience.

· Act as a liaison between cybersecurity teams, business stakeholders, and technology partners to ensure successful delivery of enhancements and process improvements.

· Support data governance and stewardship activities to ensure the integrity, accuracy, and consistency of information used in risk management processes.

· Develop metrics, reporting, and dashboards to provide visibility into risk posture, operational performance, and program effectiveness.

· Participate in risk assessments, control evaluations, and remediation tracking activities.

· Prepare business and technical documentation, including requirements, testing artifacts, training materials, and process documentation.

· Support audit, compliance, and regulatory activities by providing documentation and evidence related to cybersecurity risk management processes and system controls.

Preferred Qualifications

· Demonstrated experience as a ServiceNow Analyst, Business Analyst, or Product Owner supporting enterprise workflows and business process improvements.

· Strong understanding of cybersecurity risk management, third-party risk management, and GRC processes.

· Experience developing business requirements, use cases, user stories, workflow diagrams, and testing documentation.

· Proven experience managing enhancement requests and driving projects through the full solution lifecycle, from requirements gathering through testing and implementation.

· Experience leading or coordinating User Acceptance Testing (UAT) and defect management processes.

· Strong analytical, problem-solving, communication, and stakeholder management skills.

· Ability to translate complex business requirements into functional solutions that align with organizational objectives.

· Experience working in cross-functional environments involving business, cybersecurity, risk, compliance, and technology teams.

Minimum Education/Experience

· Bachelor’s degree in Information Security, Computer Science, or related field; or equivalent experience.

· 10 plus years of experience in cybersecurity risk analysis or related field.

· Strong analytical skills, ability to work independently, and collaborative interpersonal skills.

· Experience in business analysis, including requirements gathering and test case development.

Preferred Experience

· Experience with ServiceNow or similar vendor management software.

· Understanding of procurement and risk processes.

· Knowledge of information security and risk control frameworks.

· Familiarity with ISO 27001, SOC 2, HITRUST, FedRAMP, and ISO 22301 standards.

· Operational experience with GRC toolsets.

· CISSP/CISM certification (or similar).