Cyber ServiceNow SecOps/SIR - Senior Business Process Consultant

In this role you will shape ServiceNow-based security and operations programs for clients, guiding digital transformations in SOC and incident response. You'll lead workshops, design future-state processes, and ensure alignment with client goals and governance. You will drive design decisions for SIR, develop epics and runbooks, and mentor junior team members. This position offers the chance to influence how clients detect, respond to, and recover from cyber incidents at scale, leveraging Now Assist and AI-enabled capabilities for efficient triage.

• remote role
• compensation range: $105,400 to $207,800
• discretionary annual incentive program
• opportunities for professional development
• mentorship and leadership opportunities
• inclusive culture

• Lead requirements and design workshops with SOC, IR, threat intel, and IT operations leaders
• Guide migration from current-state tools and processes to ServiceNow-aligned architecture including adoption trade-offs
• Own the process design workstream: current/future-state design, runbooks, severity models, escalation, SLAs, KPIs
• Develop epics and user stories from workshops and process sessions
• Drive design decisions for SIR: alert-to-incident logic, playbooks, TISC enrichment, dashboards, access models
• Document requirements, data flows, integration needs with SIEM, EDR, TISC and CMDB touchpoints
• Produce artifacts: process flows, designs, test scenarios, training materials, release notes
• Identify where Now Assist and AI Specialists can reduce manual triage and define human-in-the-loop approvals
• Define integration and data requirements for SIEM, EDR, SOAR, TISC and CMDB with technical leads
• Develop workstream backlog with technical consultants to configure ServiceNow to client specifics
• Manage day-to-day agile activities: story assignment, backlog grooming, sprint prep, refinement
• Assist in project management reporting and risk identification across workstreams
• Review and own quality-checks; mentor team members
• Manage scope, timeline, risks; escalate with recommendations to engagement managers
• Lead show back demonstrations, UAT, defect triage, cutover, and adoption planning
• Contribute to proposals, estimates, and reusable assets

• Bachelor's degree in relevant fields
• 4+ years supporting or leading ServiceNow implementation projects (client-facing)
• 4+ years gathering requirements, leading workshops, and designing process flows
• 3+ years designing/configuring/implementing ServiceNow Security Incident Response (at least one full implementation)
• Working knowledge of SOC and incident response operating processes
• Experience leading a workstream and mentoring junior team members
• Experience guiding clients from legacy tools to ServiceNow out-of-the-box design
• ServiceNow Certified System Administrator (CSA)
• Ability to travel 50% on average
• Limited immigration sponsorship may be available

• Self-starter who owns a workstream
• Analytical thinker who simplifies complexity
• Resourceful problem solver
• ServiceNow (SIR) implementation and configuration
• SOC and incident response processes
• SIEM/EDR/SOAR integration