ServiceNow Business Analyst

Beacon Hill; Illinois; On-site; USD 120,000 - 150,000; Full time

Job summary

Beacon Hill is partnering with a leading enterprise to place a Cybersecurity Senior Risk Analyst / ServiceNow Business Analyst onsite in Lake County, IL. This role bridges cybersecurity, risk stakeholders, and ServiceNow teams, driving requirements, testing, and release cycles for enterprise GRC programs.

The candidate will gather requirements, develop user stories, and manage enhancements while coordinating UAT, defects, and release planning across cross-functional teams to improve risk

Qualifications

• 10+ years of experience in cybersecurity risk analysis or a related field.
• Strong ServiceNow knowledge and experience supporting enterprise workflows.
• Experience with business analysis, including requirements gathering and test-case development.
• Experience coordinating UAT, testing, defect management, and platform enhancements.
• Understanding of change-management and release cycles and the ability to follow platform release schedules.

Responsibilities

• Gather, analyze, and document business requirements for cybersecurity risk-management processes and technology solutions.
• Develop business use cases, user stories, process flows, and functional requirements.
• Manage enhancement requests and translate business needs into actionable development requirements.
• Coordinate UAT, including test strategy, test scripts, defect tracking, troubleshooting, and solution validation.
• Track incidents, defects, enhancements, and testing activities through the ServiceNow release cycle.
• Partner with developers, GRC teams, platform owners, process owners, and other stakeholders to prioritize and deliver changes.
• Investigate issues raised by risk and business-continuity stakeholders, review ServiceNow stories, and support root-cause analysis.
• Analyze existing workflows to identify opportunities to improve efficiency, data quality, automation, and user experience.
• Support cybersecurity and third-party risk assessments, control evaluations, remediation tracking, and related processes.
• Support data governance and stewardship activities that improve the integrity, accuracy, and consistency of risk information.
• Develop metrics, reporting, and dashboards covering risk posture, operational performance, and program effectiveness.
• Prepare requirements, testing artifacts, process documentation, training materials, and other business and technical documentation.
• Provide regular status updates to stakeholders and leadership regarding enhancements, testing cycles, obstacles, and work in progress.
• Support audit, compliance, and regulatory activities by providing appropriate risk-management and system-control documentation.

Skills

Cybersecurity risk analysis

ServiceNow knowledge

Business analysis

UAT coordination

Release management

Stakeholder management

Requirements gathering

Education

Bachelor's degree in Information Security / CS / IT

Tools

ServiceNow

GRC toolsets

Job description

We are partnering with a leading enterprise organization seeking a Cybersecurity Senior Risk Analyst / ServiceNow Business Analyst with deep experience across cybersecurity risk, ServiceNow, business analysis, and enterprise GRC processes.

This consultant will serve as a bridge between cybersecurity and risk stakeholders, ServiceNow technical teams, and business partners.

The role will focus heavily on requirements gathering, platform enhancements, UAT and defect management, release-cycle coordination, and improving workflows supporting cybersecurity risk programs.

Location & Schedule:

• Lake County, 60064


• Onsite


• 40 hours per week

You will support enterprise cybersecurity risk-management workflows built on ServiceNow, partnering with cross-functional teams across Governance, Risk & Compliance (GRC), vendor risk, business continuity, infrastructure, development, and platform ownership.

The position is particularly well suited for someone who understands both the business-analysis side of ServiceNow and the mechanics of taking enhancements, incidents, defects, and user stories through testing and the release lifecycle.

Key Responsibilities:

• Gather, analyze, and document business requirements for cybersecurity risk-management processes and technology solutions.


• Develop business use cases, user stories, process flows, and functional requirements.


• Manage enhancement requests and translate business needs into actionable development requirements.


• Coordinate UAT, including test strategy, test scripts, defect tracking, troubleshooting, and solution validation.


• Track incidents, defects, enhancements, and testing activities through the ServiceNow release cycle.


• Partner with developers, GRC teams, platform owners, process owners, and other stakeholders to prioritize and deliver changes.


• Investigate issues raised by risk and business-continuity stakeholders, review ServiceNow stories, and support root-cause analysis.


• Analyze existing workflows to identify opportunities to improve efficiency, data quality, automation, and user experience.


• Support cybersecurity and third-party risk assessments, control evaluations, remediation tracking, and related processes.


• Support data governance and stewardship activities that improve the integrity, accuracy, and consistency of risk information.


• Develop metrics, reporting, and dashboards covering risk posture, operational performance, and program effectiveness.


• Prepare requirements, testing artifacts, process documentation, training materials, and other business and technical documentation.


• Provide regular status updates to stakeholders and leadership regarding enhancements, testing cycles, obstacles, and work in progress.


• Support audit, compliance, and regulatory activities by providing appropriate risk-management and system-control documentation.

Required Qualifications:

• 10+ years of experience in cybersecurity risk analysis or a related field.


• Bachelor’s degree in Information Security, Computer Science, IT, Cybersecurity, or a related field, or equivalent experience.


• Strong ServiceNow knowledge and experience supporting enterprise workflows.


• Experience with business analysis, including requirements gathering and test-case development.


• Experience coordinating UAT, testing, defect management, and platform enhancements.


• Understanding of change-management and release cycles and the ability to follow platform release schedules.


• Strong analytical, problem-solving, communication, and stakeholder-management skills.


• Ability to work independently while collaborating effectively across business and technical teams.

Nice-to-Have Qualifications:

• Advanced ServiceNow experience, particularly with GRC, third-party/vendor risk management, or business continuity workflows.


• ServiceNow Administrator, Developer, Implementer, or related ServiceNow certification.


• PMP, CRISC, CISA, CISM, CISSP, or similar certification.


• Understanding of procurement and risk processes.


• Knowledge of information-security and risk-control frameworks.


• Familiarity with ISO 27001, SOC 2, HITRUST, FedRAMP, and ISO 22301.


• Operational experience with GRC toolsets.

What Makes This Role Unique:

• Combines ServiceNow business analysis with cybersecurity and third-party risk management.


• Provides ownership across the solution lifecycle, from initial requirements and user stories through testing, defect resolution, release, and ongoing enhancement.


• Offers significant cross-functional exposure to cybersecurity, risk, compliance, technology, development, infrastructure, and platform teams.


• Ideal for a curious problem solver who can understand both business needs and ServiceNow capabilities and communicate effectively with technical and non-technical stakeholders.


• Contract engagement through December 6, 2027


• Potential extension


• Conversion to a full-time client position is not anticipated at this time.


• Target start: November 1, 2026

Interview Process:

• One interview


• Conducted via Microsoft Teams


• Interview with the hiring manager

Beacon Hill is an Equal Opportunity Employer that values the strength diversity brings to the workplace. Individuals with Disabilities and Protected Veterans are encouraged to apply.

California residents:

Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

The client will remain confidential throughout the initial stages of the hiring process.