Information Security Analyst at ServiceNow

Atlanta, Georgia, United States -

Full Time

Start Date

Immediate

Expiry Date

23 Dec, 25

Salary

0.0

Posted On

24 Sep, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security, Compliance Audits, SOC 2, ISO 27001, ISMAP, HITRUST, Audit Evidence, Data Analysis, Process Improvement, Security Tools, Configuration Management, Incident Response, AI Integration, Cross-Functional Collaboration, Documentation Practices, GRC Initiatives

Industry

Software Development

Description

Company Description It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today — ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone. Job Description The ServiceNow Security Organization (SSO): The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact We are seeking a detail-oriented and proactive Information Security Analyst to join our Information Security team. In this role, you will play a critical part in supporting various compliance audits and assessments, including SOC 2, ISO 27001, ISMAP, HITRUST, and others. You will work cross-functionally across departments to understand internal controls, coordinate and fulfill audit requests, and ensure timely, accurate evidence collection. Your ability to identify patterns and continuously improve our audit response processes will directly support the effectiveness and maturity of our security and compliance program. Key Responsibilities: Coordinate and respond to internal and external audit requests in a timely and organized manner. Work closely with teams across the organization (e.g., IT, HR, Engineering, Legal) to understand processes and identify appropriate audit evidence. Independently gather, validate, and deliver audit evidence in support of compliance requirements (e.g., SOC 2, ISO 27001, ISMAP, HITRUST). Track and manage incoming audit requests using appropriate tools and documentation practices. Analyze audit request data to identify trends, recurring themes, and opportunities for process improvement. Assist in maintaining and organizing evidence repositories and documentation for reuse and efficiency. Collaborate with senior GRC team members to enhance audit readiness and develop best practices for control implementation and evidence collection. Support other information security and GRC initiatives as needed. Qualifications Experience and what you get to do in this role: Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry. Seeking a minimum of 2+ years of experience as an Information Security Analyst Monitor the security tools and systems that defend ServiceNow's production and corporate environment Determine relationships between seemingly unrelated events through deductive reasoning Come up with ways to do things faster, better and more effectively You will work with teams to maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). You will participate as an escalation contact in the On-Call rotation, to ensure that Security Operations can respond to priority incidents You may be called upon to assist with the deployment, integration and initial configuration of new security solutions #SecurityJobs Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license.

Responsibilities

The Information Security Analyst will coordinate and respond to internal and external audit requests, working closely with various teams to gather and validate audit evidence. The role also involves analyzing audit data for trends and opportunities for process improvement.