Cyber - ServiceNow Security Operations (SecOps) - Manager - Consulting

The opportunity

In a rapidly changing cybersecurity threat landscape, clients from all industries look to us for trusted solutions to increasingly complex threats and risks. Organizations are increasingly seeking to establish, mature, and optimize their security operations, connecting the people, processes, and data required to detect, prioritize, respond to, and remediate threats and vulnerabilities more efficiently and effectively. However, clients continue to struggle with utilizing available technology capabilities – including security operations technology – to automate and orchestrate their programs, or to achieve an integrated view of cyber risk across their environment. As a member of our Cybersecurity team, you will help our clients assess, design/architect, and implement ServiceNow Security Operations (SecOps) solutions to optimize their security and cyber risk programs. You will have the opportunity to serve as a trusted advisor, bringing both functional and technical knowledge well-sought after by our clients – addressing their needs while bringing insights that help them achieve their business and security objectives.

The ability to grow both personally and professionally comes from working for a global, multi-disciplinary consulting firm in which you will have the opportunity to work across sectors, competencies, and with resources of diverse backgrounds to solve our clients’ challenges and realize their business objectives. As a ServiceNow Security Operations consultant, you have the unique opportunity to bring both functional cyber knowledge and technical platform expertise, including gaining experience delivering and leading a wide array of projects.

Your key responsibilities

As our ServiceNow Security Operations capabilities continue to grow, we are seeking a highly motivated Manager focused on ServiceNow SecOps architecture, design, build, and deployment – including leading end-to-end projects, developing resources/team members, and supporting pursuits/business development. You will work with multi-disciplinary team members, within Cybersecurity and across other competencies, to help clients automate and mature their security operations and cyber risk programs utilizing ServiceNow Security Incident Response, Vulnerability Response, Configuration Compliance, Threat Intelligence, and related capabilities of the platform. You will lead and coach team members, both onshore and offshore, including developing the functional and technical skillsets required to address our clients’ evolving needs. In addition, you will support business development activities ranging from responding to proposals to fostering relationships and setting the stage for the next phases of work. You will be expected to manage projects end-to-end working directly with our clients, including overseeing the day-to-day execution and interactions between our EY and client teams. As EY is a global leading professional services organization, you will be working with talented individuals within a culture built on teaming, integrity, and collaboration, and for however long you stay, the exceptional EY experience lasts a lifetime.

Skills and attributes for success

• Strong project management skills to effectively lead a project from start to finish, including directly interacting with client teams and leading and motivating our EY team members.
• Proactively engages with EY team members and clients as part of service delivery or as part of business development activities.
• Foster an innovative and inclusive team-oriented work environment. You’ll play an active role in counselling and mentoring junior consultants within the firm.
• Develop and foster relationships with client personnel at appropriate levels, including leading interactions with clients on a regular basis (e.g., workshops, meetings, interviews, status meetings, presentations).
• Consistently deliver quality client services, execute engagement quality and risk management processes, monitor progress, manage risk, and make certain that key stakeholders are kept informed about progress and expected outcomes.
• Drive high-quality work products on your team within expected timeframes and budget.
• Advise, challenge, and bring relevant insights to clients regarding:
  • ServiceNow Security Operations solutions, use cases, and functionality, including experience from working with other clients.
  • ServiceNow security industry practices and roadmaps – where the technology capabilities are headed – to address our clients’ evolving threats, needs, and objectives.
  • How ServiceNow SecOps and other security technology capabilities fit into a client’s ecosystem (e.g., architecture, integrations with SIEM, SOAR, EDR, and vulnerability scanners).
  • Enabling security operations and cyber risk processes utilizing security technology capabilities (e.g., incident response, vulnerability management, threat intelligence, continuous controls monitoring, analytics, emerging tech).
  • Security technology solution architecture, including how ServiceNow capabilities support or connect with both upstream and downstream processes (as an example, vulnerability scanner findings connecting to remediation and change processes).
  • Delivery models, including adjusting to or enabling a client’s preferred development life cycle (e.g., agile).
  • Supporting security technology capabilities post go-live, whether transitioning to the client or positioning
• EY to provide ongoing support as part of a co-source or managed services delivery model.
• Keep abreast of current business and industry trends related to both security technology and our clients’ business.
• Demonstrate both functional and technical capabilities, professional knowledge, and the ability to assimilate new knowledge.
• Support business development activities, including responding to proposals, developing level of effort/pricing estimates, contributing to or directly writing statements of work/change orders, and building client relationships.
• Prepare and deliver client presentations regarding an array of topics ranging from recommending solutions, discussing potential approaches, or pitching new work – comfortable learning and working within Microsoft PowerPoint.
• Lead and support client demonstrations of ServiceNow SecOps solutions – can coach the team and lead a demonstration of a solution enabled by technology (versus just demonstrating technology capabilities).
• Contribute to the development of innovative solutions and thought leadership, and support relevant internal initiatives and networking required to go-to-market and drive growth.

To qualify for the role, you must have

• A bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Business, Engineering, or a related field and 5 years of experience implementing ServiceNow Security Operations (SecOps), Security GRC, or IRM solutions/use cases.
• Alternatively, a Master’s degree in Computer Science, Information Systems, Cybersecurity, Business, Engineering, or a related field and 4 years of work experience implementing ServiceNow Security Operations (SecOps), Security GRC, or IRM solutions/use cases.
• Certification from ServiceNow as a Certified System Administrator (CSA) and having completed the training and certification for Security Incident Response and/or Vulnerability Response (or other relevant certifications such as Security GRC/IRM Implementation, Threat Intelligence, Flow Design, UI Builder, Performance Analytics).
• Experience leading a team to implement ServiceNow Security Operations functionality, including integrations with other systems (e.g., SIEM, SOAR, EDR, vulnerability scanners, threat intelligence feeds) using the Integration Hub or API functionality.
• Exposure and experience with cybersecurity and Governance, Risk, and Compliance principles and processes, including security incident response, vulnerability management, threat intelligence, configuration compliance, control frameworks, controls assessments, policies and procedures, and issues and exception management.
• Experience with the assessment, design, architecture, and implementation of security operations and cyber risk programs supported by enabling security technologies.
• Familiarity with Microsoft Office products (e.g., PowerPoint, Word, Excel, Visio), data analytics, and visualization tools.
• Awareness of recent ServiceNow releases (e.g., Vancouver, Washington, Xanadu, etc.) and functionality enhancements to the Security Operations and Security GRC solutions.
• Willingness to travel to meet client obligations (whether to EY or client locations).

Ideally, you’ll also have

• Prior experience as a consultant or client-serving professional.
• Familiarity with Waterfall and Agile project delivery methodologies.
• Familiarity with performing integrations via APIs (e.g., REST, SOAP, etc.) and integration tools.
• Familiarity with security frameworks and concepts such as MITRE ATT&CK, NIST CSF, the vulnerability management lifecycle, and Indicators of Compromise (IOCs).
• Familiarity with analytics and reporting tools (e.g., Spotfire, Power BI, Tableau).
• An understanding of and implementation experience with a variety of security and GRC tools (e.g., ServiceNow SecOps/IRM, Splunk, Qualys, Tenable, Rapid7, CrowdStrike, Archer).
• CISSP, CISA, CRISC, or other relevant certification desired.
• Big Four experience is a plus, with cybersecurity, IT risk, controls, risk management, compliance, or security operations experience.

What we look for

We are looking for passionate, inclusive, and collaborative leaders who seek an opportunity to grow as a security technology consultant working to support our clients across a range of sectors, including developing trusting relationships with our people and clients. If you have a genuine passion for working in a team to solve often complex problems by leveraging technology and data – as well as developing your career personally and professionally – this is the role for you.