Senior ServiceNow Risk Mgmt. Developer

Description

• Work with leadership to develop and implement the Integrated Risk Management (IRM) and Vulnerability Response Management (VRM) modules within ServiceNow to support the Cyber Supply Chain Risk Assessment (C-SCRA) process.
• Automate the supply chain risk assessment process, replacing manual processes with automated workflows.
• Build and integrate the C-SCRA questionnaire into ServiceNow's VRM module, streamlining communication with contractors and suppliers.
• Automate the risk assessment process using ServiceNow, replacing manual processes.
• Integrate information from C-SCRM tools like Bitsight and Exiger with ServiceNow.
• Develop vulnerability data integration from Qualys and other relevant data sources.
• Use additional ServiceNow modules as needed to implement comprehensive C-SCRM capabilities.
• Provide ongoing reporting on contractor and supplier responses, automating current manual processes.
• Develop dashboards and reports to enhance visibility and tracking of supply chain risks.
• Collaborate with cybersecurity teams to ensure compliance with NIST SP 800-161 and Executive Order 14028.
• Design and develop solutions on the ServiceNow platform, ensuring they meet business requirements and follow best practices.
• Customize ServiceNow applications using workflows, forms, business rules, UI pages, UI scripts, and other customization techniques.
• Integrate ServiceNow with other systems using web services, MID Server, email, and other relevant technologies.
• Provide technical leadership and guidance to junior developers and teams, helping them solve complex technical issues and improve their skills.
• Ensure adherence to platform governance processes, including code reviews, documentation, and compliance with ServiceNow upgrade cycles.
• Collaborate with stakeholders to understand requirements and translate them into scalable, efficient, and maintainable solutions on the ServiceNow platform.
• Create and maintain technical documentation, including system design documents, architecture diagrams, and configuration guides.
• Implement and support SPM configuration and customization.
• Support IT Operations and Maintenance (O&M) Portfolio by providing a standardized, holistic view of all project work.
• Standardize reporting for legislative implementation, reducing manual reporting efforts and increasing transparency.
• Perform other duties as assigned.

• Minimum of 5 years of experience with ServiceNow development.
• At least 1 year of experience with GRC/IRM.
• Strong knowledge of cybersecurity frameworks and supply chain risk management.
• 3 years of hands-on experience with proficiency in JavaScript, Glide scripting, React, and other ServiceNow scripting languages.
• 2+ years of experience with web technologies such as HTML, CSS, and AJAX.
• 2+ years of experience working in Agile development environments, including participation in sprints and scrum meetings.
• 2+ years of experience understanding database concepts, including SQL and relational database management systems.
• 2+ years of experience in designing and customizing the user interface in ServiceNow.
• 3+ years of experience with the full software development lifecycle, including requirements gathering, development, testing, and deployment.
• Strong analytical and problem-solving skills to identify and resolve issues effectively.
• Excellent verbal and written communication skills to interact with stakeholders, team members, and users.
• Ability to work collaboratively with cross-functional teams, including developers, administrators, and project managers.

• Specific experience with the ServiceNow SPM module.
• Prior experience with the ITBM module and the ability to quickly adapt to SPM.
• Experience in IT transformation processes and project tracking.
• Familiarity with demand management and legislative processes.

• Bachelor’s degree in Cybersecurity, Information Technology, or related field or Minimum of 5 years of experience with ServiceNow development.
• ServiceNow Certified Application Developer.

• Must be able to obtain and maintain a Public Trust
• Pursuant to a government contract, U.S. citizenship is required.