ServiceNow IRM/CAM Specialist

Role: ServiceNow IRM/CAM Specialist
Location: 100% Remote (20 hours per week)
Duration: 24 Months
Summary: We are seeking an experienced ServiceNow IRM/CAM Specialist to enhance and optimize Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) capabilities. The consultant will support cybersecurity risk assessment processes, align ServiceNow workflows with NIST frameworks, and improve risk management operations, security control assessments, and evidence collection.
Key Responsibilities:

• Develop, customize, and optimize ServiceNow IRM/CAM modules and workflows.
• Align cybersecurity risk management processes with NIST Cybersecurity Framework (CSF), Risk Management Framework (RMF), and NIST SP 800-53.
• Improve cybersecurity ticket assignments, prioritization, processing timelines, and workflow efficiency.
• Develop standardized risk assessment templates, documentation, job aids, and evidence collection processes.
• Support security control assessments, risk registers, Plans of Action and Milestones (POA&Ms), and continuous monitoring.
• Collaborate with business stakeholders and cybersecurity teams to implement process improvements.
• Analyze historical ticket metrics and recommend resource and process efficiencies.
• Participate in ServiceNow platform enhancement and change management reviews.

Mandatory Requirements:

• Minimum 4 years of experience developing and optimizing ServiceNow workflows.
• Minimum 3 years of hands-on ServiceNow IRM customization and implementation experience.
• Minimum 3 years of experience in Governance, Risk, and Compliance (GRC).
• Recent ServiceNow IRM engagement with at least 3 years of experience.
• Active ServiceNow CAM engagement with at least 1 year of continuous operation.
• Strong hands-on understanding of NIST CSF/RMF and their alignment with ServiceNow IRM/CAM.
• Experience developing cybersecurity risk assessment templates and collaborating with cross-functional stakeholders.
• Excellent written communication, documentation, and stakeholder management skills.

Preferred Qualifications:

• ServiceNow Certified System Administrator (CSA).
• ServiceNow IRM Implementer or Practitioner Implementer certification.
• ServiceNow Certified Technical Architect (CTA).
• CISSP, CGRC, CAP, CISM, CRISC, CASP+, or Security+ certification.
• Bachelor's degree in Computer Science, MIS, Cybersecurity, or a related field.