ServiceNow Functional Consultant/Business Analyst - Vulnerability Response

Job Summary:
We are seeking an experienced ServiceNow Functional Consultant / Business Analyst with strong expertise in ServiceNow Vulnerability Response (VR) implementations. The ideal candidate will work closely with business stakeholders, cybersecurity teams, vulnerability management teams, and technical teams to gather requirements, define processes, design solutions, and ensure successful delivery of ServiceNow VR capabilities aligned with organizational security objectives.
Key Responsibilities:
Business Analysis & Stakeholder Management:
- Conduct requirement gathering workshops with security, IT operations, risk, and compliance teams.
- Analyze current vulnerability management processes and identify improvement opportunities.
- Translate business requirements into functional specifications, user stories, and acceptance criteria.
- Facilitate stakeholder meetings and drive requirement prioritization.
- Act as the liaison between business users and ServiceNow development teams.
ServiceNow Vulnerability Response Implementation:
- Lead functional design and implementation of ServiceNow Vulnerability Response solutions.
- Design end-to-end vulnerability remediation workflows.
- Define vulnerability intake, risk scoring, assignment, remediation, exception management, and reporting processes.
- Configure and support Vulnerability Response applications and related ServiceNow modules.
- Collaborate with security teams to integrate vulnerability scanners such as Qualys, Tenable, Rapid7, or Microsoft Defender.
Process Design & Governance:
- Define future-state processes and operating models.
- Develop functional design documents, process flows, test scenarios, and training materials.
- Support governance activities, release planning, and change management.
- Ensure compliance with ITSM, ITIL, and security governance standards.
Testing & Deployment:
- Coordinate UAT activities and defect management.
- Validate solution functionality against business requirements.
- Support deployment, training, and post-production stabilization activities.
Required Qualifications:
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.
- 5+ years of ServiceNow experience.
- 3+ years as a Functional Consultant or Business Analyst.
- Hands-on experience implementing ServiceNow Vulnerability Response (VR).
- Strong understanding of vulnerability management lifecycle.
- Experience with Agile and Scrum methodologies.

- Excellent stakeholder management and communication skills.
Preferred Qualifications:
- ServiceNow Certified System Administrator (CSA).
- ServiceNow Certified Implementation Specialist (CIS) - Vulnerability Response.
- ITIL Foundation Certification.
- Cybersecurity certifications such as Security+, CISSP, or CISM.
- Experience with CMDB, CSDM, ITSM, and SecOps modules.
Technical Skills:
- ServiceNow Vulnerability Response (VR)
- Security Operations (SecOps)
- CMDB & CSDM
- Vulnerability Scanners (Qualys, Tenable, Rapid7, Microsoft Defender)
- ITSM Processes
- Flow Designer
- Reporting & Performance Analytics
- Agile/Scrum