ServiceNow Security & Data Protection Engineer

ServiceNow Security & Data Protection Engineer

Location: This is a HYBRID position (in office Tuesday-Thursday/remote Monday & Friday). You will be based out of one of the following office locations: – Woonsocket– Hartford– Alpharetta– Boston or Wellesley– Florham Park– NYC/SoHo– Chantilly– Buffalo Grove– Scottsdale– Richardson

Position SummaryWe are seeking a highly skilled and experienced ServiceNow Security and Data Protections Engineer to join our team. This position will be responsible for ensuring the security and integrity of data within the ServiceNow platform, implementing data protection measures, and maintaining compliance with relevant security standards and regulations. The ideal candidate will have a strong background in cybersecurity, data protection, and ServiceNow platform security configurations. The Security and Data Protection Engineer will play a crucial role in ensuring the security and protection of our systems and data inside the platform. The engineer will work closely with cross-functional teams to implement and maintain security measures, monitor for potential threats, and respond to incidents. This role requires a strong understanding of security best practices and data protection technologies inside of a complex ServiceNow implementation.

Primary Duties and Responsibilities:Design, implement, and maintain security controls and data protection measures within the ServiceNow platform to safeguard sensitive information and ensure compliance with regulatory requirements.Conduct security assessments, vulnerability scans, and penetration tests to identify and remediate security vulnerabilities and weaknesses in ServiceNow configurations and customizations.Collaborate with cross-functional teams to develop and implement security policies, standards, and procedures for ServiceNow development, deployment, and operations.Monitor and analyze security logs, alerts, and incidents related to the ServiceNow platform, and respond promptly to security incidents, conducting root cause analysis and implementing corrective actions.Configure and manage access controls, role-based permissions, and encryption mechanisms within the ServiceNow platform to restrict unauthorized access and protect confidential data.Stay current with industry trends, emerging threats, and ServiceNow platform updates related to cybersecurity and data protection, and recommend and implement security enhancements accordingly.Provide guidance and support to development teams and administrators on security best practices, secure coding techniques, and data privacy principles.Collaborate with internal audit teams and external auditors to ensure that ServiceNow security controls and data protection measures meet regulatory compliance requirements.Conduct thorough testing of the platform from a security perspective to ensure they meet functional and performance requirements.Debug and troubleshoot integration issues, identifying and resolving issues in a timely manner. Document security designs, configurations, and code for future reference and knowledge sharing.Create user guides and provide training to end users or other technical staff as needed.Collaborate with the CVS Health ServiceNow Architecture, platform, product, and operations teams to ensure alignment to security standards.

Required Experience:4+ years of experience in cybersecurity, data protection, or information security roles, with a focus on securing cloud-based platforms and applications.3+ years of hands-on experience in security engineering, with a proven track record of implementing and managing security solutions within a ServiceNow environment.4 years of experience in cybersecurity principles, practices, and frameworks, such as ISO 27001, NIST Cybersecurity Framework, and GDPR.4 years of experience implementing and configuring security controls and data protection measures within the ServiceNow platform, including access controls, encryption, and audit logging.

Education or Certifications:Bachelor’s degree or equivalent experience (HS diploma + 4 years relevant experience)CSA CertificationCISSP Certification preferred

Pay RangeThe typical pay range for this role is:$124,372.50 – $247,200.00This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission, or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company’s equity award program. For more detailed information on available benefits, please visit jobs.CVSHealth.com/benefits

• *To be considered for the role:Please apply here via LinkedIn by including your resume and completing the short qualification questions. We will contact individuals whose profiles most closely match the requirements of this role.
• No agency assistance is required to assist us in filling this role.