Information Security Analyst

Company Description
It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today - ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500®. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone.
Job Description
The ServiceNow Security Organization (SSO):
The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact
We are seeking a detail-oriented and proactive Information Security Analyst to join our Information Security team. In this role, you will play a critical part in supporting various compliance audits and assessments, including SOC 2, ISO 27001, ISMAP, HITRUST, and others.
You will work cross-functionally across departments to understand internal controls, coordinate and fulfill audit requests, and ensure timely, accurate evidence collection. Your ability to identify patterns and continuously improve our audit response processes will directly support the effectiveness and maturity of our security and compliance program.
Key Responsibilities:

• Coordinate and respond to internal and external audit requests in a timely and organized manner.
• Work closely with teams across the organization (e.g., IT, HR, Engineering, Legal) to understand processes and identify appropriate audit evidence.
• Independently gather, validate, and deliver audit evidence in support of compliance requirements (e.g., SOC 2, ISO 27001, ISMAP, HITRUST).
• Track and manage incoming audit requests using appropriate tools and documentation practices.
• Analyze audit request data to identify trends, recurring themes, and opportunities for process improvement.
• Assist in maintaining and organizing evidence repositories and documentation for reuse and efficiency.
• Collaborate with senior GRC team members to enhance audit readiness and develop best practices for control implementation and evidence collection.
• Support other information security and GRC initiatives as needed.

Qualifications
Experience and what you get to do in this role:

• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI's potential impact on the function or industry.
• Seeking a minimum of 2+ years of experience as an Information Security Analyst
• Monitor the security tools and systems that defend ServiceNow's production and corporate environment
• Determine relationships between seemingly unrelated events through deductive reasoning
• Come up with ways to do things faster, better and more effectively
• You will work with teams to maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
• You will participate as an escalation contact in the On-Call rotation, to ensure that Security Operations can respond to priority incidents
• You may be called upon to assist with the deployment, integration and initial configuration of new security solutions

#SecurityJobs
Additional Information
Work Personas
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
Accommodations
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. ©2025 Fortune Media IP Limited. All rights reserved. Used under license.