Cybersecurity Sr. Risk Analyst – ServiceNow
HireTalent · North Chicago, Illinois, United States
FULL TIMEpermanent
Job Description
Cybersecurity Sr. Risk Analyst – ServiceNow (Vendor Risk Management)
All candidates should make sure to read the following job description and information carefully before applying.
Contract | 1 year (possible extension) | Onsite – Lake County, IL (Chicago area)
About the roleWe're hiring a Cybersecurity Sr. Risk Analyst with strong ServiceNow and business analysis experience to support a Vendor Risk Management and Business Continuity program. You'll sit between cybersecurity, business stakeholders, and technical teams — gathering requirements, managing enhancements and defects, running UAT, and reporting status to leadership.
What you'll doGather, analyze, and document business requirements for risk management processes and platform solutionsDevelop use cases, user stories, process maps, and functional requirements for cybersecurity and GRC initiativesManage and prioritize enhancement requests; translate business needs into actionable development requirementsCoordinate testing — test strategy, test scripts, UAT, defect tracking, and validation of delivered solutionsWork the release cycle with cross-functional teams, developers, and data migration projectsSupport incidents and defects end to end: troubleshoot root cause and identify the correct path forwardPresent weekly status updates to leadership on upcoming enhancements, testing cycles, and in-flight storiesSupport audits, compliance, and regulatory requests with documentation and evidence
Required10+ years in cybersecurity risk analysis or a closely related fieldServiceNow experience — GRC, Vendor Risk (CVRM), Business Continuity (BCM), or TPRM modules preferred at an advanced levelCertifications: Certified Scrum Master (CSM) and/or ServiceNow Administrator, Developer, or general user certifiedBachelor's degree in Information Security, Computer Science, IT, or related field (or equivalent experience)Business analysis experience: requirements gathering, use case and test case developmentStrong understanding of cybersecurity risk management, third-party/vendor xzbcwsv risk, and GRC frameworks
PreferredPMP, CRISC, CISA, CISM, or CISSPAudit experienceFamiliarity with ISO 27001, SOC 2, HITRUST, FedRAMP, ISO 22301Procurement and risk process exposureGRC toolset and information security / risk control framework knowledge
DetailsSchedule: 40 hours/weekTravel: noneInterview: one round, Teams videoStart: ASAP (targeting early December)No far commutes — local candidates only
Apply with your updated resume and a short note on your ServiceNow and vendor risk experience.
All candidates should make sure to read the following job description and information carefully before applying.
Contract | 1 year (possible extension) | Onsite – Lake County, IL (Chicago area)
About the roleWe're hiring a Cybersecurity Sr. Risk Analyst with strong ServiceNow and business analysis experience to support a Vendor Risk Management and Business Continuity program. You'll sit between cybersecurity, business stakeholders, and technical teams — gathering requirements, managing enhancements and defects, running UAT, and reporting status to leadership.
What you'll doGather, analyze, and document business requirements for risk management processes and platform solutionsDevelop use cases, user stories, process maps, and functional requirements for cybersecurity and GRC initiativesManage and prioritize enhancement requests; translate business needs into actionable development requirementsCoordinate testing — test strategy, test scripts, UAT, defect tracking, and validation of delivered solutionsWork the release cycle with cross-functional teams, developers, and data migration projectsSupport incidents and defects end to end: troubleshoot root cause and identify the correct path forwardPresent weekly status updates to leadership on upcoming enhancements, testing cycles, and in-flight storiesSupport audits, compliance, and regulatory requests with documentation and evidence
Required10+ years in cybersecurity risk analysis or a closely related fieldServiceNow experience — GRC, Vendor Risk (CVRM), Business Continuity (BCM), or TPRM modules preferred at an advanced levelCertifications: Certified Scrum Master (CSM) and/or ServiceNow Administrator, Developer, or general user certifiedBachelor's degree in Information Security, Computer Science, IT, or related field (or equivalent experience)Business analysis experience: requirements gathering, use case and test case developmentStrong understanding of cybersecurity risk management, third-party/vendor xzbcwsv risk, and GRC frameworks
PreferredPMP, CRISC, CISA, CISM, or CISSPAudit experienceFamiliarity with ISO 27001, SOC 2, HITRUST, FedRAMP, ISO 22301Procurement and risk process exposureGRC toolset and information security / risk control framework knowledge
DetailsSchedule: 40 hours/weekTravel: noneInterview: one round, Teams videoStart: ASAP (targeting early December)No far commutes — local candidates only
Apply with your updated resume and a short note on your ServiceNow and vendor risk experience.
Details
| Company | HireTalent |
| Location | North Chicago, Illinois, United States |
| Type | FULL TIME |
| Niche | tech |
| Experience | permanent |