Description

We are seeking a highly skilled Service Now Platform Security Engineering Lead to architect and implement secure, scalable, and data-driven solutions within the Service Now ecosystem. This role will focus on platform-level security, identity and access management, and data engineering, ensuring compliance, governance, performance, and reliability across Service Now modules and integrations.

Key Responsibilities

- Service Now Authorization & Authentication Engineering
- Design and implement secure authentication mechanisms using SAML 2.0, OAuth 2.0, LDAP, and Multi-Factor Authentication (MFA).
- Architect and manage Role-Based Access Control (RBAC) across Service Now modules, ensuring least-privilege access and separation of duties.
- Define and enforce Access Control Lists (ACLs) at the table, field, and record levels to protect sensitive data.
- Implement Scoped Application permissions to isolate functionality and restrict access to specific modules or components.
- Define and own User groups and locations in the platform.
- Develop and maintain user provisioning and de-provisioning workflows integrated with enterprise IAM systems.
- Monitor and audit login activity, session management, and access violations using native Service Now tools
- Collaborate with Info Sec and IAM teams to align Service Now access policies with enterprise security standards and compliance frameworks.
- Security Strategy & Compliance
- Define and enforce compliance to security policies, standards, and best practices for the Service Now platform in alignment with Service Now recommended Platform security shared responsibility model.
- Ensure service now platform is compliant with internal and external infosec requirements and industry best practices
- Establish governance frameworks for secure development, data protection, and risk mitigation.
- Data Privacy, Security & Encryption
- Defining/Implement Service Now data classification,



data retention & data discovery strategy in alignment with Ameriprise data management policies /standards
- Implement data encryption strategy at rest, in transit & encryption key management
- Determining the data collection, storage, usage, sharing, archiving, and destruction policy of data processed in Service Now instances.
- Monitor access patterns and system activity to identify potential security threats.
- Secure Integrations & Automation
- Ensure and mature secure API management for integrations between Service Now and third-party security tools (e.g., Active Directory, Cyber Ark and Aveksa, Azure AD, RIM, IAM).
- Ensure secure data exchange and prevent unauthorized access to Service Now instances.
- Leadership & Collaboration
- Mentor platform engineers and developers on secure coding, identity management, and data handling best practices.
- Collaborate with cybersecurity, data, and infrastructure teams to ensure platform alignment with enterprise architecture.
- Lead technical design reviews, platform governance, and roadmap planning for platform security aspects

Required Skills & Qualifications:

Technical Expertise:

- Service Now Security: Deep understanding of Sec Ops, GRC, RBAC, ACLs, and platform security best practices.
- Cybersecurity & Compliance: Strong knowledge of security frameworks (NIST, ISO 27001, CIS), regulatory compliance, and risk management.
- Access & Identity Management: Expertise in SSO, MFA, OAuth, LDAP, and user authentication.
- Integration & Development: Experience with REST APIs, Java Script, OAuth, and secure integration practices.




- Cloud Security: Understanding of SaaS security, encryption methods, and cloud-based security models.

Certifications

- Service Now Certifications:
- Certified System Administrator (CSA)
- Certified Implementation Specialist – Sec Ops or GRC

Preferred Qualifications:

- Experience securing large-scale Service Now implementations in regulated industries (finance, healthcare, government).
- Solid problem-solving, analytical, and communication skills to interact with technical and non-technical stakeholders.
- Knowledge of emerging security trends, zero trust architecture, and AI-driven security solutions.
- Cybersecurity Certifications:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)

Experience Required:

- 15+ years of IT security experience, with 12+ years in Service Now security architecture, administration, or operations.
- Hands-on experience in security automation, incident response, and risk management using Service Now.
- Prior experience working with cybersecurity, risk management, and IT governance teams.

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time

Timings

(2:00p-10:30p)

India Business Unit

AWMPO AWMP&S; President's Office

Job Family Group

Technology

📌 ServiceNow Platform Data Security Engineering- Manager (India)
🏢 56672 Ameriprise India
📍 India