Senior Information Security Analyst - ServiceNow GRC

Job Description

One of our top financial customers is seeking a Senior Information Security Analyst with expertise in ServiceNow GRC. As a Senior Information Security Analyst you will be responsible for developing and maintaining security policies and security controls as well as ensuring regulatory compliance using the ServiceNow GRC platform. You will not only work in policies, but also in security controls and supporting audit.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 8+ years of experience in information security governance, risk, and compliance

• 3+ years of hands on experience with ServiceNow GRC

• Strong and hands-on experience with most recent versions of ServiceNow GRC from Xanadu (2024 release) onward which include: Xanadu (2024), Yokohama (Q1 2025),k Zurich (Q4 2025), and Australia (expected Q2 2026)

• Strong experience creating policies, and building and managing security controls and supporting audit

• Experience working in the financial services industry and helping mature processes

• Experience that aligns with security awareness trainings that includes phishing

• Must have active certification in one or more of the below GRC Generalist Certifications:

• ServiceNow Certified Implementation Specialist, - GRC (preferred)

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Certified in Risk and Information Systems Control (CRISC)

• Certified Information Systems Auditor (CISA) - Master's degree or MBA with a concentration in Information Assurance or Financial Risk