ServiceNow Security & Data Protection Lead

9025 CVS Shared Services Resources LLC; Rhode Island; Hybrid; USD 130,000 - 261,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Comprehensive benefits package

Job summary

CVS Health seeks a Lead ServiceNow Security and Data Protection Engineer to own platform security, governance, and data protection for the ServiceNow environment. You will set security strategy, align with audits, and guide risk decisions across enterprise teams.

Lead initiatives, manage vulnerability remediation, and drive continuous improvement for now-enabled capabilities. The role requires deep security expertise and collaboration across security, risk, and architecture groups.

Qualifications

• ServiceNow CSA and 7+ years in ServiceNow platform engineering/implementation.
• 6+ years designing access governance models including least-privilege.
• 5+ years leading platform security initiatives with data protection focus.
• 4+ years regulated or audited apps with evidence production and remediation.
• 3+ years in JavaScript, Glide API, OAuth/SAML/MFA and encryption.
• 3+ years privileged access management with JIT elevation.
• 2+ years managing security backlogs and roadmaps in Agile.
• 2+ years influencing security decisions across stakeholders.

Responsibilities

• Own platform access governance across ServiceNow products and entitlement management.
• Lead access certifications and automated remediation for least-privilege controls.
• Define and validate platform security controls to meet regulatory needs.
• Lead audits, risk assessments, evidence collection, and remediation.
• Perform security reviews for changes, upgrades, and integrations.
• Conduct secure code reviews and vulnerability remediation activities.
• Secure integrations with internal systems and third parties.
• Own platform security monitoring, logging, and incident response.
• Investigate unauthorized access and PHI/PII exposure risks.
• Manage encryption, data masking, and data classification controls.
• Lead identity services including SSO, MFA, federation, and Zero Trust.
• Oversee security tooling and PAM platforms; liaise with security teams.
• Roadmap platform security and governance standards; prioritize backlog.

Skills

ServiceNow security

Access governance

Security architecture

Regulatory & risk

OAuth/SAML/MFA

JavaScript / Glide API

Privileged access management

Agile delivery

Education

Bachelor's degree

Tools

Splunk

PAM solutions (BeyondTrust/CyberArk)

SSPM

SailPoint / Entra ID / Okta

Job description

CVS Health seeks a Lead ServiceNow Security and Data Protection Engineer to own platform security, governance, and data protection for the ServiceNow environment. You will set security strategy, align with audits, and guide risk decisions across enterprise teams.

Lead initiatives, manage vulnerability remediation, and drive continuous improvement for now-enabled capabilities. The role requires deep security expertise and collaboration across security, risk, and architecture groups.