Cyber Security Risk Expert

Job Title: Cyber Security Risk Expert
Location: Eagan, MN for a hybrid work arrangement
Duration: Long-term (12+ Months)

Job Description:

Design, administer, and execute procedures for the identification, assessment, documentation, and communication of risks that could compromise client data and operations stemming from weaknesses in technology platforms, solution architectures, governance processes, and security capabilities, against industry standards and best practices. Provide recommendations to improve and sustain the security of the enterprise's data and operations and document the organizational risk response plan (accept, mitigate, transfer, or avoid). Monitor, report on, and validate, the status and efficacy of risk mitigation, transfer, or avoidance plans.

Task Description and/or Specific Requirements:

ServiceNow Vulnerability Response (VR) Expert Level:

Demonstrate expert-level knowledge and proficiency with ServiceNow (SNow) Vulnerability Response (VR) and generally associated modules, including but not limited to the following skills, abilities and knowledge:

General: Deep understanding of SNow platform core functionalities and components, including forms, MID servers, tables, dashboards, and access control lists (ACLs)

Scripting: Proficiency in rules and scripting (e.g., JavaScript), adequate to develop, test, and deploy

Integrations: Proficiency in developing and troubleshooting VR integrations, including APIs and service graph connectors

Dashboarding: Proficiency in designing and developing VR-focused dashboards and reports.

Cybersecurity & Risk Management Responsibilities:

Design and administer security procedures to sustain the security of organizational data and access to technology and communication systems

Assess risk of exposure of proprietary data through weaknesses in platforms, access procedures, and forms of access

Review, collate, understand, and present data from various sources to meet remediation needs

Knowledge of automation coding to automate data extrapolation, organization, and dissemination

Review, investigate, and assign cybersecurity vulnerabilities across applications, systems, hardware, and cloud computing environments

Manage multiple projects/initiatives of varying sizes, complexities, and risks

Compliance, Remediation & SME Responsibilities:

Demonstrated proficiency in evaluating and supporting documentation, validation, and remediation processes for new and existing IT systems

Demonstrated ability to review and understand security blueprints, principles, models, designs, standards, and guidelines

Experience with vulnerability remediation tools and processes

Ability to serve as a Subject Matter Expert (SME) for the Client s VRM process, including providing guidance to stakeholders, business units, and new CISO resources

Professional Skills:

Strong organizational skills with ability to build schedules and step-by-step action plans

Effective communication and collaboration skills to work with cross-functional teams, stakeholders, business units, and IT professionals

Ability to conduct presentations for audiences with varying technical knowledge levels

Experience / Education:

A minimum of thirteen (13) to twenty (20) years of relevant experience

A degree from an accredited College/University in the applicable field is preferred; four additional years of relevant experience in lieu of a degree is required

If the individual s degree is not in the applicable field, four additional years of related experience is required

Works on high-visibility or mission-critical aspects of a given program and performs duties independently

Oversees direct reporting resources and/or is responsible for staff assigned to a specific job

Special credentials (licenses and/or certifications) may be required at the Task Order level on a case-specific basis

About IDEXCEL, INC
Idexcel is an IT services organization, with a mission to bring great people and great organizations together. Our diverse client base represents a wide range of industries, including technology, telecom, insurance, healthcare, manufacturing, banking & financial services, food & commodities trading and federal organizations. Our teams of experienced recruiters directly work with client companies seeking exceptional people to help with their business initiatives. Idexcel, Inc. is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law.