ServiceNow Integrated Risk Management & Continuous Authorization & Monitoring Specialist

Estrada Consulting, Inc.; Sacramento (CA); Remote; USD 83,000 - 117,000; Part time

Benefits offered by this job

Remote work

Part-time contract

Job summary

Estrada Consulting, Inc. is seeking a ServiceNow Integrated Risk Management (IRM) & CAM Specialist for 100% remote, part-time contract. The role centers on configuring and optimizing ServiceNow IRM and CAM, aligning workflows with NIST CSF/RMF, and driving governance improvements across the enterprise.

You will collaborate with security teams to implement risk assessment processes, evidence collection, and continuous monitoring in a distributed environment. Start ASAP.

Qualifications

• Four (4) years minimum in ServiceNow workflow development and optimization.
• Three (3) years minimum customizing ServiceNow IRM and CAM.
• Three (3) years in Governance, Risk, and Compliance (GRC).
• Three (3) years cross-functional collaboration across business units and tech teams.
• Three (3) years recent ServiceNow IRM experience and one (1) year with CAM.

Responsibilities

• Provide development, configuration, and admin support for ServiceNow IRM/CAM modules.
• Review and enhance integrations for risk assessments and evidence collection.
• Support risk documentation across organizational, system, and application levels.
• Assess and improve risk assessment processes, ticket workflows, and queue management.
• Communicate findings clearly to cybersecurity teams and stakeholders.

Skills

Analytical thinking

Communication

Independent work

Documentation

Stakeholder engagement

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity

Tools

ServiceNow IRM

ServiceNow CAM

ServiceNow workflow development

NIST CSF/RMF

Security controls documentation

Job description

ServiceNow Integrated Risk Management (IRM) & Continuous Authorization and Monitoring (CAM) Specialist

Location: 100% Remote

Work Schedule: Part-Time – 20 hours per week (4 hours per day, Monday–Friday)

Working Hours: Between 8:00 AM and 5:00 PM Pacific Time (flexible start and end times)

Position Type: Contract

Duration: Up to 24 months

Start Date: ASAP

Position Overview

We are seeking an experienced ServiceNow Integrated Risk Management (IRM) & Continuous Authorization and Monitoring (CAM) Specialist to support the continued development, enhancement, and maturation of an enterprise cybersecurity risk management program.

The ideal candidate will possess extensive hands‑on experience configuring and customizing ServiceNow IRM and CAM modules, optimizing risk assessment workflows, and implementing cybersecurity governance processes aligned with the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and Risk Management Framework (RMF).

This role requires a combination of ServiceNow technical expertise, cybersecurity governance knowledge, process improvement capabilities, and strong stakeholder collaboration skills.

Key Responsibilities

• Provide technical development, configuration, and administration support for ServiceNow IRM and CAM modules.
• Review, enhance, and develop existing ServiceNow integrations supporting cybersecurity risk assessments, authorization processes, security control attestations, and evidence collection.
• Support centralized management of organizational, business system, and application‑level security assessment and authorization documentation.
• Assess existing cybersecurity risk assessment processes, ticket assignment methodologies, prioritization procedures, processing times, and resource utilization.
• Analyze ServiceNow workflows and recommend improvements to increase operational efficiency and reduce processing delays.
• Develop standardized cybersecurity risk assessment documentation, request templates, and ticket submission procedures.
• Review historical ticket metrics, identify workload trends, and recommend strategies for improving queue management and resource allocation.
• Collaborate with cybersecurity awareness and training teams to improve stakeholder understanding of risk review requirements and ticket submission processes.
• Engage business units, technical teams, and organizational stakeholders to support consistent risk assessment processes.
• Support the initial implementation and pilot execution of NIST RMF processes using ServiceNow IRM and CAM.
• Assist with the assignment and refinement of organizational‑level, system‑level, and hybrid security controls.
• Establish and refine security evidence requirements, assessment procedures, authorization artifacts, and continuous monitoring processes.
• Provide recommendations for ongoing cybersecurity risk monitoring and control effectiveness assessments.
• Participate in ServiceNow platform enhancement reviews and change management meetings as needed.
• Prepare technical documentation, process recommendations, project updates, and implementation guidance.
• Communicate technical findings and recommendations clearly to cybersecurity teams, business stakeholders, and management.

Mandatory Qualifications

Candidates must meet all the following requirements:

1. ServiceNow Workflow Development and Optimization

• Minimum four (4) years of experience developing, analyzing, and improving ServiceNow workflow processes.
• Demonstrated experience identifying inefficiencies, optimizing workflows, and improving enterprise service management processes.

2. ServiceNow IRM and CAM Customization

• Minimum three (3) years of experience customizing ServiceNow Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) capabilities.
• Experience aligning ServiceNow risk management functionality with organizational business objectives and risk appetite.
• Experience supporting mid‑sized to large enterprise environments.

3. Governance, Risk, and Compliance (GRC)

• Minimum three (3) years of experience working within a Governance, Risk, and Compliance environment.
• Demonstrated experience executing corporate projects, implementing risk management initiatives, and supporting organizational improvement efforts.

4. Cross‑Functional Stakeholder Collaboration

• Minimum three (3) years of experience collaborating across business units and technical teams.
• Experience establishing partnerships, assessing organizational requirements, and engaging stakeholders to implement cybersecurity risk assessment processes.

5. Cybersecurity Risk Documentation

• Demonstrated experience developing professional templates and standardized documentation supporting organizational‑level cybersecurity risk assessment processes.
• Experience documenting security controls, assessment requirements, authorization processes, and supporting evidence.

6. Recent ServiceNow IRM and CAM Experience

• Minimum three (3) years of recent ServiceNow IRM engagement.
• Minimum one (1) year of active, continuous experience working with ServiceNow CAM.
• Hands‑on experience supporting ServiceNow IRM/CAM functionality in an operational enterprise environment.

7. NIST Cybersecurity Framework Expertise

• Strong foundational knowledge of NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF).
• Demonstrated hands‑on experience aligning NIST CSF and RMF processes within ServiceNow IRM/CAM.
• Familiarity with NIST SP 800-53 Security and Privacy Controls for Information Systems and Organizations.

Desired Qualifications

The following certifications and educational qualifications are highly desirable:

ServiceNow Certifications

• ServiceNow Practitioner Implementer or higher
• ServiceNow Certified System Administrator (CSA)
• ServiceNow GRC: Integrated Risk Management (IRM) Implementer
• ServiceNow Certified Technical Architect (CTA)

Cybersecurity and Risk Management Certifications

• ISC2 Certified Information Systems Security Professional (CISSP)
• ISC2 Certified in Governance, Risk and Compliance (CGRC) or Certified Authorization Professional (CAP)
• ISACA Certified Information Security Manager (CISM)
• ISACA Certified in Risk and Information Systems Control (CRISC)
• CompTIA Advanced Security Practitioner (CASP+)
• CompTIA Security+

Education

• Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, or a related field from an accredited university.

Technical Skills

• ServiceNow Integrated Risk Management (IRM)
• ServiceNow Continuous Authorization and Monitoring (CAM)
• ServiceNow workflow development, customization, and optimization
• Governance, Risk, and Compliance (GRC)
• NIST Cybersecurity Framework (CSF)
• NIST Risk Management Framework (RMF)
• NIST SP 800-53 security controls
• Security control assessment and attestation
• Security authorization and evidence collection
• Continuous cybersecurity monitoring
• Cybersecurity risk assessment and documentation
• ServiceNow ticket and workflow management
• Process improvement and operational metrics
• Stakeholder engagement and technical documentation

Required Professional Skills

• Strong analytical and problem‑solving abilities.
• Excellent written and verbal communication skills.
• Ability to explain complex cybersecurity and technical concepts to technical and non‑technical stakeholders.
• Strong organizational and documentation skills.
• Ability to work independently in a remote environment.
• Experience collaborating with cross‑functional teams and managing multiple priorities.
• Strong attention to detail and commitment to cybersecurity governance best practices.

Additional Information

This is a 100% remote, part‑time contract opportunity supporting an enterprise cybersecurity risk management and ServiceNow enhancement initiative.

The selected specialist will work approximately four (4) hours per day, Monday through Friday, within Pacific Time business hours. Start and end times may be negotiated.