Lead ServiceNow Security, Data Protection Engineer

This is a fully remote position, open to applicants in Rhode Island.

📋 Description

• Take ownership of platform access governance across ServiceNow products, which includes managing roles, groups, ACLs, privileged access, delegated administration, and entitlement management.

• Oversee access certifications, attestations, entitlement reviews, and automated remediation to uphold least-privilege controls.

• Define, implement, maintain, and validate platform security controls in accordance with regulatory, audit, and enterprise security requirements.

• Lead both internal and external audits, perform risk assessments, collect evidence, validate controls, and address any findings.

• Conduct security reviews for platform modifications, upgrades, releases, applications, integrations, and architectural designs.

• Execute secure code reviews, security assessments, platform health evaluations, and vulnerability remediation efforts.

• Ensure secure integrations with internal systems, third parties, acquisitions, and newly onboarded business entities.

• Manage security monitoring, logging, detection use cases, investigations, and incident response activities.

• Investigate incidents related to unauthorized access, credential misuse, phishing, impersonation, and potential PHI/PII exposure.

• Oversee encryption, key management, data masking, data classification, DLP controls, secure file handling, and the protection of sensitive data.

• Lead identity and authentication services, including SSO, MFA, federation, certificate lifecycle management, and Zero Trust capabilities.

• Administer security tools, SSPM solutions, privileged credential management platforms, and associated technologies.

• Act as the primary security liaison with ServiceNow, Enterprise Security, Risk, Compliance, and Audit teams.

• Own the security roadmap, manage backlog prioritization, governance standards, policies, and continuous improvement initiatives.

• Assess new ServiceNow capabilities, platform enhancements, and emerging security technologies.

• Govern security, privacy, and compliance requirements for Now Assist, AI agents, and other AI-enabled functionalities.

• Evaluate and mitigate AI-related security, privacy, and access-control risks while advancing AI-driven security operations.

⛳️ Requirements

• ServiceNow Certified System Administrator (CSA) certification is required.

• A minimum of 7 years of experience in ServiceNow platform engineering, administration, architecture, or implementation, including management of complex enterprise ServiceNow environments.

• At least 6 years of experience in designing and managing access governance models, which includes ACL design and debugging, role inheritance, group structures, entitlement management, and least-privilege enforcement.

• More than 5 years of experience leading platform security initiatives, including risk evaluation, security architecture decisions, privileged access controls, and safeguarding sensitive enterprise data.

• A minimum of 4 years supporting regulated or audited applications, covering access certifications, control validation, audit evidence production, regulatory assessments, and remediation tasks.

• At least 3 years of experience developing solutions using JavaScript, Glide API scripting, OAuth, SAML, MFA, encryption, credential management, and automated security remediation.

• More than 3 years of administering privileged access management capabilities, including time-bound or just-in-time elevation models and automated access lifecycle controls.

• At least 2 years managing security backlogs, prioritization, roadmaps, or performing Product Owner responsibilities in Agile delivery environments.

• A minimum of 2 years influencing security, access, or architecture decisions across various stakeholder groups while balancing delivery, compliance, and risk considerations.

• A Bachelor’s degree from an accredited university or equivalent work experience (High School Diploma/GED plus 4 years of relevant experience) is required.

• Preferred: ServiceNow security certifications such as CIS-SIR, CIS-VR, or CIS-GRC and/or industry certifications including CISSP or CISM.

• Preferred: Experience with SIEM platforms, preferably Splunk, covering detection engineering, custom alert development, security monitoring, and incident investigations.

• Preferred: Expertise in certificate lifecycle management, encryption, key management, BYOK, SSPM, and PAM solutions such as BeyondTrust or CyberArk.

• Preferred: Working knowledge of HIPAA, SOX, SOC 2, ISO 27001, NIST, vulnerability management, and tools such as Qualys, Snyk, or Veracode.

• Preferred: Experience in healthcare environments managing PHI, AI governance, data privacy controls, identity platforms such as SailPoint, Entra ID, and Okta, and complex ServiceNow environments.

🏝️ Benefits

• CVS Health bonus, commission, or short-term incentive program.

• Award target in the company’s equity award program.

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Paid time off.

• Retirement savings options.

• Wellness programs.

• Other resources supporting physical, emotional, and financial well-being, based on eligibility.