ServiceNow Business Analyst

We are partnering with a leading enterprise organization seeking a Cybersecurity Senior Risk Analyst / ServiceNow Business Analyst with deep experience across cybersecurity risk, ServiceNow, business analysis, and enterprise GRC processes.

Apply fast, check the full description by scrolling below to find out the full requirements for this role.
This consultant will serve as a bridge between cybersecurity and risk stakeholders, ServiceNow technical teams, and business partners.
The role will focus heavily on requirements gathering, platform enhancements, UAT and defect management, release-cycle coordination, and improving workflows supporting cybersecurity risk programs.
Location & Schedule:Lake County, 60064Onsite40 hours per weekNo travel required
You will support enterprise cybersecurity risk-management workflows built on ServiceNow, partnering with cross-functional teams across Governance, Risk & Compliance (GRC), vendor risk, business continuity, infrastructure, development, and platform ownership.
The position is particularly well suited for someone who understands both the business-analysis side of ServiceNow and the mechanics of taking enhancements, incidents, defects, and user stories through testing and the release lifecycle.
Key Responsibilities:Gather, analyze, and document business requirements for cybersecurity risk-management processes and technology solutions.Develop business use cases, user stories, process flows, and functional requirements.Manage enhancement requests and translate business needs into actionable development requirements.Coordinate UAT, including test strategy, test scripts, defect tracking, troubleshooting, and solution validation.Track incidents, defects, enhancements, and testing activities through the ServiceNow release cycle.Partner with developers, GRC teams, platform owners, process owners, and other stakeholders to prioritize and deliver changes.Investigate issues raised by risk and business-continuity stakeholders, review ServiceNow stories, and support root-cause analysis.Analyze existing workflows to identify opportunities to improve efficiency, data quality, automation, and user experience.Support cybersecurity and third-party risk assessments, control evaluations, remediation tracking, and related processes.Support data governance and stewardship activities that improve the integrity, accuracy, and consistency of risk information.Develop metrics, reporting, and dashboards covering risk posture, operational performance, and program effectiveness.Prepare requirements, testing artifacts, process documentation, training materials, and other business and technical documentation.Provide regular status updates to stakeholders and leadership regarding enhancements, testing cycles, obstacles, and work in progress.Support audit, compliance, and regulatory activities by providing appropriate risk-management and system-control documentation.
Required Qualifications:10+ years of experience in cybersecurity risk analysis or a related field.Bachelor’s degree in Information Security, Computer Science, IT, Cybersecurity, or a related field, or equivalent experience.Strong ServiceNow knowledge and experience supporting enterprise workflows.Experience with business analysis, including requirements gathering and test-case development.Experience coordinating UAT, testing, defect management, and platform enhancements.Understanding of change-management and release cycles and the ability to follow platform release schedules.Strong analytical, problem-solving, communication, and stakeholder-management skills.Ability to work independently while collaborating effectively across business and technical teams.
Nice-to-Have Qualifications:Advanced ServiceNow experience, particularly with GRC, third-party/vendor risk management, or business continuity workflows.ServiceNow Administrator, Developer, Implementer, or related ServiceNow certification.Certified Scrum Master (CSM).PMP, CRISC, CISA, CISM, CISSP, or similar certification.GRC, vendor risk, disaster recovery, or audit experience.Understanding of procurement and risk processes.Knowledge of information-security and risk-control frameworks.Familiarity with ISO 27001, SOC 2, HITRUST, FedRAMP, and ISO 22301.Operational experience with GRC toolsets.
What Makes This Role Unique:Combines ServiceNow business analysis with cybersecurity and third-party risk management.Provides ownership across the solution lifecycle, from initial requirements and user stories through testing, defect resolution, release, and ongoing enhancement.Offers significant cross-functional exposure to cybersecurity, risk, compliance, technology, development, infrastructure, and platform teams.Ideal for a curious problem solver who can understand both business needs and ServiceNow capabilities and communicate effectively with technical and non-technical stakeholders.
Engagement Details:Contract engagement through December 6, 2027Potential extensionConversion to a full-time client position is not anticipated at this time.Target start: November 1, 2026
Interview Process:One interviewConducted via Microsoft TeamsInterview with the hiring manager
Beacon Hill is an Equal Opportunity Employer that values the strength diversity brings to the workplace. Individuals with Disabilities and Protected Veterans are encouraged to apply.
Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.
California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
If you bring strong ServiceNow expertise and know how to translate cybersecurity and GRC needs into well-defined requirements, testing strategies, and successful platform enhancements, we encourage you to apply. xzbcwsv
The client will remain confidential throughout the initial stages of the hiring process.