ServiceNow Consultant

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Work You'll Do

Deloitte provides ServiceNow risk and security services in the following areas based on the client's immediate and long-term needs. By coupling our business and cyber risk process functional experts on platform automation and integration with our security domain leaders across consulting services, Deloitte can provide a full spectrum of services including:

Advise - process and strategy roadmaps, implementation plans and business case development, quantitative return on investment, program and target operating model, data strategy & governance, risk & control framework, content definition & standardization, training and end user enablement

Implement - configuration and as needed, customized, solutions on ServiceNow Security Operations (Security Incident Response and Vulnerability Response) and Integrated Risk Management (IRM) applications utilizing accelerators via pre-built templates and proofs of concept

Operate - manage Cyber Security programs ranging from keeping the lights on for the client's environment (e.g. upgrades, access help desk) to full-service use case development and dashboards

As a ServiceNow Consultant - Functional, you will support the business process design, requirements gathering, and functional configuration of ServiceNow solutions that help organizations achieve better visibility and automation across their cyber and risk programs. This role requires a combination of ServiceNow platform knowledge, business analysis skills, and consulting experience. Working alongside senior functional consultants, you will help translate business needs into platform configurations that align with organizational objectives and industry best practices. Some examples of what you will do include:

• Support requirements workshops and stakeholder interviews; capture and validate business/functional requirements and user stories.

• Document “as-is” and “to-be” processes (flows, roles/RACI, inputs/outputs, controls/metrics) to support ServiceNow automation.

• Analyze current processes and tools to identify gaps, efficiencies, and configuration opportunities within ServiceNow.

• Demonstratable understanding of ServiceNow out-of-the-box features (forms, workflows, notifications, SLAs, reports/dashboards, roles/ACLs) under team lead guidance.

• Contribute to functional design and build for security/risk solutions (IRM, SecOps, ITOM, ITAM, TPRM), including requirements traceability to configuration.

• Document data models, risk/control structures, taxonomies, scoring, and reporting requirements within ServiceNow.

• Produce project artifacts (requirements, design specs, process documentation, test plans, training/job aids) in alignment with delivery standards.

• Develop UAT scenarios and scripts; coordinate test execution, triage defects, and support retesting and sign-off.

• Facilitate module demos, user testing sessions, and end-user training with prepared scripts and supporting materials.

• Support deployment and cutover activities (checklists, release notes, validation) for large-scale implementations.

• Communicate progress, risks, and next steps clearly to client stakeholders and internal team members; escalate issues as needed.

• Build strong working relationships with client counterparts; support senior team members in meetings with executive risk stakeholders.

The Team

Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.

Skills and Qualifications

Required:

• BA/BS Degree in Computer Science, Information Systems, Cyber Security, Engineering, Information Technology, Finance, Business, or related field

• 2+ years of experience supporting ServiceNow implementation projects in a client-facing functional or business analyst role

• 2+ years of business analysis experience including requirements gathering, process documentation, and stakeholder communication

• 2+ years of consulting or professional services experience in a client-facing delivery role

• 2+ years of work experience consulting with organizations to design and implement one or more of the following ServiceNow modules:

æ IT Operations Management (ITOM)

æ IT Asset Management (ITAM)

æ Integrated Risk Management (IRM)

æ Security Operations (SecOps)

æ Third-Party Risk Management (TPRM)

• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve

• Limited immigration sponsorship may be available

Preferred:

• One or more of the following ServiceNow Certified Implementation Specialist (CIS) certifications:

æ CIS-Risk and Compliance (CIS-RC)

æ CIS-Security Incident Response (CIS-SIR)

æ CIS-Vulnerability Response (CIS-VR)

æ CIS-Third-Party Risk Management (CIS-TPRM)

æ CIS-Hardware Asset Management (CIS-HAM)

æ CIS-Software Asset Management (CIS-SAM)

æ CIS-Service Mapping (CIS-SM)

æ CIS-Discovery (CIS-DISCO)

æ CIS-Event Management (CIS-EM)

• 2+ years of hands-on experience with functional configuration of one or more of the following ServiceNow platform solutions:

æ IT Operations Management (ITOM)

æ IT Asset Management (ITAM)

æ Integrated Risk Management (IRM)

æ Security Operations (SecOps)

æ Third-Party Risk Management (TPRM)

• ServiceNow Certified System Administrator (CSA)

• ServiceNow Certified Application Developer (CAD) for candidates with technical configuration depth

• Experience with RSA Archer or other GRC platforms, particularly in migration or integration scenarios with ServiceNow

• Experience with CMDB architecture and Common Service Data Model (CSDM) design and implementation

• Previous Consulting or Big 4 experience

• Experience with ServiceNow reporting and dashboards

• Knowledge of regulatory frameworks and standards such as NIST CSF, ISO 27001, SOX, GDPR, or HIPAA

• Certifications such as CISSP, CISM, or CISA

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $88,600 to $163,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.