We are seeking an experienced ServiceNow CIS-VR Implementor to join our growing ServiceNow practice. In this role, you will lead the design, configuration, and deployment of the Vulnerability Response (VR) application, ensuring clients can mature their security, risk, and remediation processes through automation and best practices. This is a hands-on delivery role requiring strong technical expertise, excellent communication skills, and a deep understanding of vulnerability management programs.

Key Responsibilities

Lead end-to-end implementation of the ServiceNow Vulnerability Response (VR) application.

Conduct workshops to gather business requirements and translate them into scalable VR solutions.

Configure VR components, including:

Vulnerability Groups and Assignment Rules

Integration with external scanners (Qualys, Rapid7, Tenable, etc.)

Remediation Workflow Automation

Risk Scoring and Prioritization Models

Develop and implement data models, dashboards, scripts, business rules, and UI policies.

Ensure accurate ingestion and normalization of vulnerability data.

Align VR implementations with industry frameworks (NIST, CIS, ISO 27001) and client governance models.

Create process documentation, configuration guides, user training content, and operator runbooks.

Troubleshoot and optimize VR configurations to improve accuracy, performance, and user experience.

Collaborate with GRC, SecOps, Platform, and Infrastructure teams to ensure VR fits into their broader security ecosystem.

Stay current on ServiceNow releases and roadmap items affecting SecOps and VR.

Required Qualifications

ServiceNow CIS-VR Certification (mandatory).

3+ years of hands-on experience implementing or supporting ServiceNow SecOps or VR.

Strong understanding of vulnerability lifecycle management, remediation processes, and vulnerability scoring frameworks (CVSS, CWE, CPE).

Proficiency with ServiceNow platform components:

Flow Designer

Script Includes

Business Rules

Data Import & Transform Maps

Performance Analytics

Experience integrating ServiceNow VR with scanning tools and CMDB.

Ability to design workflows, data structures, and automation for high-volume vulnerability data.

Excellent communication skills; ability to run workshops and lead client-facing sessions.

Preferred Skills

Additional ServiceNow certifications (CSA, CAD, CIS-SecOps, CIS-GRC, CIS-CMDB).

Experience with ServiceNow Security Incident Response (SIR) or GRC/IRM.

Background in cybersecurity, risk management, or infrastructure operations.

Knowledge of scripting (JavaScript) and API integrations (REST/SOAP).

Must to have skills: (please at least 3 skills/exp):
1. ServiceNow CIS-VR certification
2 Minimum of 3 CIS-VR Implementations as the lead architect/implementor
3. Exceptional communication skills

Nice to have skills: (please at least 3 skills/exp):
1. Proficiency in Flow Designer, Business Rules, Script Includes and UI Policies & Client scripts.
2. Deep knowledge in Vunerability Items, Vunlerability Groups, Assignment Rules, Automated Remediation Workflows, Risk Scoring.
3. ServiceNow CTA designation