Third Party Cyber Risk Services Operations - Lead Analyst

ServiceNow TPRM Sr.Solution Engineer (Offshore)

· Location- Remote

· Contract- 6 months

· Budget- 1.50 lpm

Job Description

Position Description: 

Templar Shield is seeking a highly skilled ServiceNow TPRM Sr. Solution Engineer to provide advisory and technical leadership for the design, optimization, implementation, and sustainment of ServiceNow Third-Party Risk Management solutions. This role translates business needs into practical platform capabilities, prioritizes out-of-box functionality, and delivers solutions aligned with Templar Shield and ServiceNow best practices. 

 ​

Requirements

Primary Objectives:

· Provide advisory support and implementation best practices for ServiceNow Third-Party Risk Management.

· Assess and optimize existing ServiceNow TPRM implementations, including processes, workflows, configurations, and operating practices.

· Review and refine third-party risk tiering, Inherent Risk Questionnaires (IRQ), Vendor Risk Assessments (VRA), and scoring methodologies to improve consistency and alignment with business needs.

· Define and recommend solution options for formally tracking risk mitigation activities in ServiceNow, considering applicable licensing constraints and other business, technical, and operational factors.

· Support the creation, review, and refinement of ServiceNow user stories, acceptance criteria, process designs, test plans, and implementation documentation using Agile/Scrum methods.

· Provide advisory and subject matter expert support for client-led development, testing, validation, defect management, user acceptance testing, rollout planning, and rollout execution.

· Prepare and support project-related documentation, solution demonstrations, and stakeholder presentations.

· Provide post-rollout hypercare, troubleshooting, and knowledge transfer for the TPRM solution in accordance with the applicable project plan or other written agreement.  

· Provide knowledge transfer and advisory support to client personnel for ongoing operation, administration, and sustainment of the TPRM program following project completion.  

· Design, configure, implement, and support TPRM workflows, assessments, notifications, reporting, dashboards, portals, integrations, approval paths, exceptions, and ongoing monitoring.  

· Develop and maintain integrations between ServiceNow TPRM and third-party tools using APIs and web services, including JSON, SOAP, and XML.  

· Create and maintain solution design specifications, configuration records, deployment notes, troubleshooting guidance, and technical knowledge articles. 

· Provide technical guidance and TPRM best practices to client teams; train and mentor junior consultants and administrators.  

· Collaborate effectively with distributed teams and manage assigned work in alignment with client expectations and delivery standards.

Qualifications: 

Core Experience:

· 5+ years of ServiceNow development or implementation experience, including at least 3 years focused on ServiceNow TPRM.

· Bachelor's degree from an accredited college or university, or equivalent relevant professional experience.

· Demonstrated ability to lead technical workstreams, facilitate client discussions, solve complex problems, and exercise independent judgment in a customer-focused consulting environment.

· Excellent written and verbal communication, analytical, documentation, troubleshooting, and teamwork skills.

Technical Skills:

· Strong hands-on knowledge of ServiceNow TPRM and relevant platform capabilities, including Flow Designer, UI Builder, business rules, notifications, UI pages, UI macros, formatters, database views, reporting, dashboards, and role-based security.

· Proficiency in ServiceNow scripting and development, including JavaScript, Glide API, web services, and application configuration; experience with HTML and CSS. Familiarity with React, AngularJS, or Java is beneficial.

· Ability to design TPRM data models, workflow automation, integrations, security roles, reports, and client-specific configurations while maintaining platform upgradeability.

· Knowledge of third-party risk assessment, compliance, control testing, issue management, remediation, internal audit, and continuous monitoring methodologies.

· Knowledge of common security and compliance frameworks, such as NIST SP 800-53, NIST SP 800-171, NIST CSF, ISO 27000 series, PCI DSS, CIS, and NERC CIP. Knowledge of ServiceNow Performance Analytics, ITSM, or ITOM is a plus.

Certifications:

· ServiceNow Certified System Administrator required. ServiceNow Certified Implementation Specialist in TPRM preferred.

This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).

Key responsibilities:

• Perform security control assessments against organizational policies, security standards, and regulatory requirements.
• Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
• Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
• Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
• Conduct control testing and risk assessments and support internal/external security audits.
• Review security policies, procedures, standards, and governance frameworks for compliance.
• Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
• Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

• Cyber Security Risk & Compliance / GRC
• IT Risk & Controls
• Security Control Assessment & Testing
• Security Audits
• Backup & Disaster Recovery
• BCP / DR
• Risk Assessment
• Compliance & Governance
• Security Policies & Standards
• Audit Finding & Remediation Management

This role will be permanent with NAM info and deploy to client location Chennai.

Work Mode: WORK FROM OFFICE

Offer salary can offer on a decent hike

Role Descriptions:

Exp Range: 6-10 years

Primary Competency : Terraform, Hashi Sentinel (IaC/PaC), Kubernetes (GKE/EKS)

City Locations: Bengaluru or Chennai

Key Responsibilities*

Experience Required: 6-10

Role Descriptions:

Security Monitoring & Incident Response

Investigate and analyze security alerts escalated by L1 SOC analysts.

Perform triage, containment, eradication, and recovery activities for security incidents.

1. Perform in-depth analysis of security alerts escalated from L1

2. Investigate suspicious activities using SIEM, EDR, and threat intelligence tools

3. Correlate events across multiple log sources (firewalls, endpoints, IAM, cloud logs)

4. Validate true positives and recommend reducing false positives

5. Lead triage and response for medium to high severity incidents

6. Coordinate with IT, network, and application teams during incidents and support deep investigations when required

7. Conduct proactive threat hunting based on TTPs (e.g., MITRE ATT&CK)

8. Fine-tuning and optimize SIEM use cases to reduce false positives

9. Develop new correlation rules and detection logic

10. Document incidents, findings, and response actions

11. Prepare weekly , monthly reports for SOC leadership and stakeholders

Desire candidate

• Candidate should have valid PF.

Roles & Responsibilities

• Develop and customize ServiceNow solutions with strong focus on IRM and Third-Party Risk Management (TPRM).
• Configure and customize TPRM workflows covering third-party onboarding, due diligence, risk assessments and review processes.
• Configure questionnaires, assessment templates, scoring methodologies, risks, controls and control objectives.
• Develop and configure Business Rules, Client Scripts, UI Policies, ACLs, Forms and Catalog components.
• Automate approval and vendor onboarding workflows using Flow Designer.
• Work on ServiceNow scripting using JavaScript and Glide APIs.
• Develop integrations with external systems using REST APIs, Scripted REST APIs and REST Messages.
• Create and customize tables, fields, forms, reports and dashboards based on business requirements.
• Work on ServiceNow Policy & Compliance / Risk & Compliance capabilities wherever required.
• Troubleshoot workflows, approvals, notifications, integrations and other ServiceNow issues.
• Follow ServiceNow development best practices, change management and deployment processes.

Ideal Candidate

1.Strong ServiceNow Developer / ServiceNow IRM / TPRM profiles

2.Mandatory (Experience 1) - Must have minimum 3+ years of overall IT experience with strong hands-on experience in ServiceNow Development, including configuration, customization and implementation.

3Mandatory (Experience 2) - Must have strong hands-on experience in ServiceNow Integrated Risk Management (IRM), with specific experience in Third-Party Risk Management (TPRM)

4.Mandatory (Experience 3) - Must have hands-on experience working on end-to-end TPRM processes, including Third-Party/Vendor Onboarding, Due Diligence, Risk Assessment, Review and Approval workflows

5.Mandatory (Experience 4) - Must have experience configuring and customizing TPRM questionnaires, assessment templates, scoring methodologies, Risk, Risk Statements, Controls and Control Objectives

6.Mandatory (Experience 5) - Must have strong ServiceNow development experience with Business Rules, Client Scripts, UI Policies, ACLs, Forms, Tables and Fields

7Mandatory (Experience 6) - Must have hands-on experience with Flow Designer for workflow automation, including vendor onboarding, approvals and TPRM-related business processes

8.Mandatory (Experience 7) - Must have strong programming/scripting experience in JavaScript and ServiceNow Glide APIs, with hands-on development of client-side and server-side scripts

9.Mandatory (Experience 8) - Must have experience developing integrations with external systems using REST APIs, Scripted REST APIs and REST Messages

10.Mandatory (Experience 9) - Must have strong experience troubleshooting ServiceNow workflows, approvals, notifications and integrations

11.Mandatory (Domain Exclusion) - Candidate must have hands-on development experience in TPRM/IRM; profiles with only ServiceNow ITSM, ServiceNow Administration or generic ServiceNow support experience will not be considered. - Required

12.Mandatory (Age) - Candidate's Age should be below 28 years.

13.Mandatory (CTC) - The CTC breakup offered will be 75% fixed + 25% variable, as per company policy

14.Preferred (Experience 1) - Candidates with experience in ServiceNow Policy & Compliance and/or Audit Management modules will be preferred.

15.Preferred (Experience 2) - Candidates with ServiceNow CSA / CIS certifications, particularly certifications related to IRM, Risk, Compliance or relevant ServiceNow modules, will be preferred.

16.Preferred (Experience 3) - Experience with ServiceNow Workspace, instance upgrades, quarterly cloning, deployment/change management and platform optimization will be preferred

17.Preferred (Certification) - ServiceNow CSA or CIS certifications, especially CIS-IRM or CIS-TPRM.