Cyber - ServiceNow Security Operations (SecOps) - Manager - Consulting

EY • Hartford, DC

2d • $144,900 - $302,100 • Hybrid

About The Position

In a rapidly changing cybersecurity threat landscape, clients from all industries look to us for trusted solutions to increasingly complex threats and risks. Organizations are increasingly seeking to establish, mature, and optimize their security operations, connecting the people, processes, and data required to detect, prioritize, respond to, and remediate threats and vulnerabilities more efficiently and effectively. However, clients continue to struggle with utilizing available technology capabilities – including security operations technology – to automate and orchestrate their programs, or to achieve an integrated view of cyber risk across their environment. As a member of our Cybersecurity team, you will help our clients assess, design/architect, and implement ServiceNow Security Operations (SecOps) solutions to optimize their security and cyber risk programs. You will have the opportunity to serve as a trusted advisor, bringing both functional and technical knowledge well-sought after by our clients – addressing their needs while bringing insights that help them achieve their business and security objectives.
The ability to grow both personally and professionally comes from working for a global, multi-disciplinary consulting firm in which you will have the opportunity to work across sectors, competencies, and with resources of diverse backgrounds to solve our clients’ challenges and realize their business objectives. As a ServiceNow Security Operations consultant, you have the unique opportunity to bring both functional cyber knowledge and technical platform expertise, including gaining experience delivering and leading a wide array of projects.

Requirements

• Strong project management skills to effectively lead a project from start to finish, including directly interacting with client teams and leading and motivating our EY team members.
• Proactively engages with EY team members and clients as part of service delivery or as part of business development activities.
• Foster an innovative and inclusive team-oriented work environment. You’ll play an active role in counselling and mentoring junior consultants within the firm.
• Develop and foster relationships with client personnel at appropriate levels, including leading interactions with clients on a regular basis (e.g., workshops, meetings, interviews, status meetings, presentations).
• Consistently deliver quality client services, execute engagement quality and risk management processes, monitor progress, manage risk, and make certain that key stakeholders are kept informed about progress and expected outcomes.
• A bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Business, Engineering, or a related field and 5 years of experience implementing ServiceNow Security Operations (SecOps), Security GRC, or IRM solutions/use cases.
• Alternatively, a Master’s degree in Computer Science, Information Systems, Cybersecurity, Business, Engineering, or a related field and 4 years of work experience implementing ServiceNow Security Operations (SecOps), Security GRC, or IRM solutions/use cases.
• Certification from ServiceNow as a Certified System Administrator (CSA) and having completed the training and certification for Security Incident Response and/or Vulnerability Response (or other relevant certifications such as Security GRC/IRM Implementation, Threat Intelligence, Flow Design, UI Builder, Performance Analytics).
• Experience leading a team to implement ServiceNow Security Operations functionality, including integrations with other systems (e.g., SIEM, SOAR, EDR, vulnerability scanners, threat intelligence feeds) using the Integration Hub or API functionality.
• Exposure and experience with cybersecurity and Governance, Risk, and Compliance principles and processes, including security incident response, vulnerability management, threat intelligence, configuration compliance, control frameworks, controls assessments, policies and procedures, and issues and exception management.
• Experience with the assessment, design, architecture, and implementation of security operations and cyber risk programs supported by enabling security technologies.
• Familiarity with Microsoft Office products (e.g., PowerPoint, Word, Excel, Visio), data analytics, and visualization tools.
• Awareness of recent ServiceNow releases (e.g., Vancouver, Washington, Xanadu, etc.) and functionality enhancements to the Security Operations and Security GRC solutions.
• Willingness to travel to meet client obligations (whether to EY or client locations).

Nice To Haves

• Prior experience as a consultant or client-serving professional.
• Familiarity with Waterfall and Agile project delivery methodologies.
• Familiarity with performing integrations via APIs (e.g., REST, SOAP, etc.) and integration tools.
• Familiarity with security frameworks and concepts such as MITRE ATT&CK, NIST CSF, the vulnerability management lifecycle, and Indicators of Compromise (IOCs).
• Familiarity with analytics and reporting tools (e.g., Spotfire, Power BI, Tableau).
• An understanding of and implementation experience with a variety of security and GRC tools (e.g., ServiceNow SecOps/IRM, Splunk, Qualys, Tenable, Rapid7, CrowdStrike, Archer).
• CISSP, CISA, CRISC, or other relevant certification desired.
• Big Four experience is a plus, with cybersecurity, IT risk, controls, risk management, compliance, or security operations experience.

Responsibilities

• Lead and coach team members, both onshore and offshore, including developing the functional and technical skillsets required to address our clients’ evolving needs.
• Support business development activities ranging from responding to proposals to fostering relationships and setting the stage for the next phases of work.
• Manage projects end-to-end working directly with our clients, including overseeing the day-to-day execution and interactions between our EY and client teams.
• Drive high-quality work products on your team within expected timeframes and budget.
• Advise, challenge, and bring relevant insights to clients regarding ServiceNow Security Operations solutions, use cases, and functionality, including experience from working with other clients.
• Advise, challenge, and bring relevant insights to clients regarding ServiceNow security industry practices and roadmaps – where the technology capabilities are headed – to address our clients’ evolving threats, needs, and objectives.
• Advise, challenge, and bring relevant insights to clients regarding how ServiceNow SecOps and other security technology capabilities fit into a client’s ecosystem (e.g., architecture, integrations with SIEM, SOAR, EDR, and vulnerability scanners).
• Advise, challenge, and bring relevant insights to clients regarding enabling security operations and cyber risk processes utilizing security technology capabilities (e.g., incident response, vulnerability management, threat intelligence, continuous controls monitoring, analytics, emerging tech).
• Advise, challenge, and bring relevant insights to clients regarding security technology solution architecture, including how ServiceNow capabilities support or connect with both upstream and downstream processes (as an example, vulnerability scanner findings connecting to remediation and change processes).
• Advise, challenge, and bring relevant insights to clients regarding delivery models, including adjusting to or enabling a client’s preferred development life cycle (e.g., agile).
• Advise, challenge, and bring relevant insights to clients regarding supporting security technology capabilities post go-live, whether transitioning to the client or positioning EY to provide ongoing support as part of a co-source or managed services delivery model.
• Keep abreast of current business and industry trends related to both security technology and our clients’ business.
• Support business development activities, including responding to proposals, developing level of effort/pricing estimates, contributing to or directly writing statements of work/change orders, and building client relationships.
• Prepare and deliver client presentations regarding an array of topics ranging from recommending solutions, discussing potential approaches, or pitching new work – comfortable learning and working within Microsoft PowerPoint.
• Lead and support client demonstrations of ServiceNow SecOps solutions – can coach the team and lead a demonstration of a solution enabled by technology (versus just demonstrating technology capabilities).
• Contribute to the development of innovative solutions and thought leadership, and support relevant internal initiatives and networking required to go-to-market and drive growth.

Benefits

• medical and dental coverage
• pension and 401(k) plans
• a wide range of paid time off options
• flexible vacation policy
• time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence

What This Job Offers

• Job Type: Full-time
• Career Level: Manager