Please find below the new requirement.
| Employment Type: | Contract |
|---|---|
| Duration: | 24-months |
| Remote Job: | Yes |
| Country: | United States |
| State: | California |
| City: | Sacramento, CA, 94209 |
| Zip Code: | 94209 |
| Required Hours Week: | 40 |
| Primary Skills: | Risk, analyzing, and compliance (GRC) environment, involving establishing partnerships between business units, including hands-on experience aligning CSF and RMF functions within ServiceNow IRM/CAM modules., and creating efficiencies within ServiceNow workflow processes. • Minimum of three (3) years' experience customizing Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) capabilities within ServiceNow to align with , cybersecurity-focused risk assessment processes. • Proposed resource must have a recent ServiceNow Integrated Risk Management (IRM) engagement with a minimum of three (3) years’ experience and an active ServiceNow Continuous Authorization and Monitor, independently analyzing and engaging organizational stakeholders as needed to ensure smooth process development and implementation across the organization for risk assessment functions. • Demonstrated experience developing professional templates to s, with a proven track record of executing corporate projects and growth-based initiatives. • Minimum of three (3) years' experience working on cross-collaborative efforts, • Minimum of four (4) years' experience developing |
SMUD is issuing this Request for Proposal to engage a qualified resource to provide a leased employee to support our continued build out and maturing of ServiceNow's Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) modules. This initiative will help to better align SMUD's Cybersecurity Risk Program with NIST's Cybersecurity and Risk Management Frameworks (CSF/RMF).
In an effort to mature the Sacramento Municipal Utility District's (SMUD) Cybersecurity Risk Program, SMUD is seeking a leased employee for technical database administrator and developer assistance in maturing our development of ServiceNow's Continuous Authorization and Monitoring (CAM) module. In support of the aforementioned, SMUD is looking for technical expertise to review, consult, improve upon, and continue development of our existing integration to further our progress towards centralizing organizational-level common control, business system and application-level assessment & authorization packages; to include security control attestation and supporting documentation/evidence collection.
To successfully integrate with SMUD's Cybersecurity Risk Team's current approach, it is important that the leased employee have a strong understanding of NIST's Cybersecurity (CSF) and Risk Management Frameworks (RMF), and familiarity with navigating Security and Privacy Controls for Information Systems and Organizations (NIST SP 800-53).
Technical assistance is also being sought to support the modification of existing ServiceNow workflows maintained by other SMUD business areas, as well as creation of new workflows to support Cybersecurity Risk Team process efficiencies. This support will require regular attendance at SMUD's weekly ServiceNow platform enhancement reviews, as well as weekly ServiceNow change management review board meetings.
SMUD's Cybersecurity Risk Team welcomes proposals from potential collaborators that outline their technical qualifications, experience assisting clients with ServiceNow CAM module
