Cybersecurity Senior Risk Analyst - Vendor Risk Management (ServiceNow)

Location: Abbott Park, IL

Duration: 12 months (possible extension)

Work Schedule: Monday–Friday, 8:00 AM–5:00 PM (40 hours/week)

Workplace: On-site

Position Overview: We are seeking an experienced Cybersecurity Senior Risk Analyst / ServiceNow Business Analyst to support Cybersecurity Vendor Risk Management (CVRM) and Business Continuity Management (BCM) initiatives. The ideal candidate will combine strong ServiceNow platform knowledge, cybersecurity risk management expertise, and business analysis skills to manage requirements, platform enhancements, testing, defect resolution, and release management.

Key Responsibilities: Gather, analyze, and document business requirements, functional specifications, user stories, and use cases. Manage ServiceNow enhancements, incidents, defects, and change requests throughout the release lifecycle. Coordinate and execute User Acceptance Testing (UAT), including test case development, defect tracking, and solution validation. Collaborate with Governance, Risk & Compliance (GRC), cybersecurity, vendor risk, business continuity, developers, and ServiceNow platform teams. Troubleshoot platform issues, identify root causes, and help determine appropriate solutions. Support data migration projects, workflow improvements, and process optimization. Track project milestones, testing progress, and outstanding issues. Prepare documentation and deliver weekly status reports to leadership. Required Skills and Qualifications Strong hands-on experience with ServiceNow platform functionality and release management. Experience in business analysis, requirements gathering, and functional documentation. Practical experience with UAT, test scripts, defect management, and enhancement tracking. Strong understanding of cybersecurity risk management and enterprise workflows. Excellent analytical, troubleshooting, communication, and stakeholder management skills. Proficiency in Microsoft Office and project documentation. Experience Requirements 10+ years of experience in cybersecurity risk analysis or a related field, as specified in the job description. Demonstrated ServiceNow experience supporting business processes, enhancements, testing, and releases. Experience working with cross-functional business and technical teams.

Preferred Qualifications: Experience with Governance, Risk & Compliance (GRC), Third-Party Risk Management (TPRM), or Vendor Risk Management. Exposure to Business Continuity Management (BCM), disaster recovery, audit, or compliance. ServiceNow Administrator, Developer, Implementer, or Certified ScrumMaster (CSM) certification. Additional certifications such as CISA, CISM, CRISC, or PMP. Familiarity with ISO 27001, SOC 2, HITRUST, FedRAMP, or ISO 22301. Education Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent experience.