Information security analyst serp_jobs.h1.location_city

Job Description

The ServiceNow Security Organization (SSO) :

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact

We are seeking a detail-oriented and proactive Information Security Analyst to join our Information Security team. In this role, you will play a critical part in supporting various compliance audits and assessments, including SOC 2, ISO 27001, ISMAP, HITRUST, and others.

You will work cross-functionally across departments to understand internal controls, coordinate and fulfill audit requests, and ensure timely, accurate evidence collection. Your ability to identify patterns and continuously improve our audit response processes will directly support the effectiveness and maturity of our security and compliance program.

Key Responsibilities :

• Coordinate and respond to internal and external audit requests in a timely and organized manner.
• Work closely with teams across the organization (e.g., IT, HR, Engineering, Legal) to understand processes and identify appropriate audit evidence.
• Independently gather, validate, and deliver audit evidence in support of compliance requirements (e.g., SOC 2, ISO 27001, ISMAP, HITRUST).
• Track and manage incoming audit requests using appropriate tools and documentation practices.
• Analyze audit request data to identify trends, recurring themes, and opportunities for process improvement.
• Assist in maintaining and organizing evidence repositories and documentation for reuse and efficiency.
• Collaborate with senior GRC team members to enhance audit readiness and develop best practices for control implementation and evidence collection.
• Support other information security and GRC initiatives as needed.

Qualifications

Experience and what you get to do in this role :

#SecurityJobs

Additional Information

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license.