Lead ServiceNow Security, Data Protection Engineer

CVS Health

. Own platform access governance across ServiceNow products, including roles, groups, ACLs, privileged access, delegated administration, and entitlement management .

Posted 10/14/2026full-timeRemote • Rhode Island • United StatesSenior💰 $130,295 - $260,590 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in ServiceNow platform governance, security controls, and access management, with a strong focus on regulatory compliance and risk mitigation. Proficient in leading security initiatives, conducting audits, and managing privileged access while ensuring the protection of sensitive data.

Highest-signal resume keywords

ServiceNow Certified System Administrator (CSA)Access Governance ManagementSecurity Architecture LeadershipJavaScript DevelopmentPrivileged Access Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Access Control Lists (ACL)Entitlement ManagementSecurity MonitoringVulnerability RemediationAutomated Security RemediationRisk AssessmentSecure Code ReviewData Loss Prevention (DLP)Identity and Authentication ServicesEncryption Management

Soft Skills

Stakeholder InfluenceTeam LeadershipCommunication

Tools & Technologies

ServiceNowSIEM PlatformsSplunkGlide APIOAuthSAMLBeyondTrustCyberArkQualysSnyk

Certifications & Qualifications

CISSPCISMCIS-SIRCIS-VRCIS-GRC

Industry Keywords

HIPAASOXSOC 2ISO 27001NISTPHIPIIRegulatory ComplianceAudit Evidence ProductionAI Governance

Tech Stack

Tools & technologies

JavaScriptServiceNowSplunk

About the role

Key responsibilities & impact

Own platform access governance across ServiceNow products, including roles, groups, ACLs, privileged access, delegated administration, and entitlement management
Lead access certifications, attestations, entitlement reviews, and automated remediation to maintain least-privilege controls
Define, implement, maintain, and validate platform security controls for regulatory, audit, and enterprise security requirements
Lead internal and external audits, risk assessments, evidence collection, control validation, and remediation of findings
Perform security reviews for platform changes, upgrades, releases, applications, integrations, and architectural designs
Conduct secure code reviews, security assessments, platform health evaluations, and vulnerability remediation
Secure integrations with internal systems, third parties, acquisitions, and newly onboarded business entities
Own security monitoring, logging, detection use cases, investigations, and incident response
Investigate unauthorized access, credential misuse, phishing, impersonation, and potential PHI/PII exposure incidents
Manage encryption, key management, data masking, data classification, DLP controls, secure file handling, and sensitive data protection
Lead identity and authentication services, including SSO, MFA, federation, certificate lifecycle management, and Zero Trust capabilities
Administer security tooling, SSPM solutions, privileged credential management platforms, and related technologies
Serve as primary security liaison with ServiceNow, Enterprise Security, Risk, Compliance, and Audit teams
Own the security roadmap, backlog prioritization, governance standards, policies, and continuous improvement initiatives
Evaluate new ServiceNow capabilities, platform enhancements, and emerging security technologies
Govern security, privacy, and compliance requirements for Now Assist, AI agents, and other AI-enabled capabilities
Assess and mitigate AI-related security, privacy, and access-control risks while advancing AI-driven security operations

Requirements

What you’ll need

ServiceNow Certified System Administrator (CSA) certification
7+ years of ServiceNow platform engineering, administration, architecture, or implementation experience, including ownership of complex enterprise ServiceNow environments
6+ years designing and managing access governance models, including ACL design and debugging, role inheritance, group structures, entitlement management, and least-privilege enforcement
5+ years leading platform security initiatives, including risk evaluation, security architecture decisions, privileged access controls, and protection of sensitive enterprise data
4+ years supporting regulated or audited applications, including access certifications, control validation, audit evidence production, regulatory assessments, and remediation activities
3+ years developing solutions using JavaScript, Glide API scripting, OAuth, SAML, MFA, encryption, credential management, and automated security remediation
3+ years administering privileged access management capabilities, including time-bound or just-in-time elevation models and automated access lifecycle controls
2+ years managing security backlogs, prioritization, roadmaps, or Product Owner responsibilities within Agile delivery environments
2+ years influencing security, access, or architecture decisions across multiple stakeholder groups while balancing delivery, compliance, and risk considerations
Bachelor’s degree from an accredited university or equivalent work experience (High School Diploma/GED plus 4 years of relevant experience)
Preferred: ServiceNow security certifications such as CIS-SIR, CIS-VR, or CIS-GRC and/or industry certifications including CISSP or CISM
Preferred: Experience with SIEM platforms, preferably Splunk, including detection engineering, custom alert development, security monitoring, and incident investigations
Preferred: Expertise in certificate lifecycle management, encryption, key management, BYOK, SSPM, and PAM solutions such as BeyondTrust or CyberArk
Preferred: Working knowledge of HIPAA, SOX, SOC 2, ISO 27001, NIST, vulnerability management, and tools such as Qualys, Snyk, or Veracode
Preferred: Experience with healthcare environments handling PHI, AI governance and data privacy controls, identity platforms such as SailPoint, Entra ID, and Okta, and complex ServiceNow environments

Benefits

Comp & perks

CVS Health bonus, commission or short-term incentive program
Award target in the company’s equity award program
Medical coverage
Dental coverage
Vision coverage
Paid time off
Retirement savings options
Wellness programs
Other resources supporting physical, emotional, and financial well-being, based on eligibility