Senior Information Security Analyst - ServiceNow (Toronto - Hybrid)
The Role
The Senior Information Security Analyst (ServiceNow) is responsible for developing, implementing, and supporting technology processes and change control that help protect the organization. This role provides subject matter expertise in ITSM with a focus on Change Management and delivery (Release Management), risk assessment and identification of control gaps to mitigate risk.
The successful candidate contributes to projects of moderate to high complexity and delivers reporting, analysis, and assessments that support functional, business line, and enterprise-level objectives A key focus of the role is supporting and enhancing ServiceNow capabilities across multiple pillars, including day-to-day operational activities, process improvements, and product delivery
Key Responsibilities
• Provide expert consultation and advice to business and technology partners on technology controls, information security programs, policies, standards, and security incidents within the specialized area of responsibility
• Conduct project-level consulting on risk assessments, control design, control effectiveness, vulnerability assessments, and other relevant security matters
• Lead or contribute to risk and control design assessments across an application portfolio, documenting the business and enterprise impact of control gaps, including mitigation strategies and remediation plans
• Support the definition, development, and oversight of enterprise security management strategies and frameworks
• Help ensure that appropriate technology, governance, and processes are in place to monitor, detect, prevent, and respond to current and emerging security threats
• Collaborate proactively with stakeholders, service owners, and platform owners to integrate security requirements into enterprise architecture and address identified control gaps
• Provide consultation on regulatory compliance requirements, related reporting, and inquiries
• Participate in security incident response activities relevant to the business or enterprise and represent the function’s position to stakeholders as needed
• Adhere to internal policies, procedures, technology control standards, and applicable regulatory guidelines • Contribute to the review of internal processes and identify opportunities to improve efficiency, effectiveness, and control outcomes
• Support and advise on enterprise frameworks and methodologies related to technology controls and information security activities
• Promote a strong risk management culture by influencing behaviors that reduce risk across the enterprise • Remain informed on emerging issues, industry trends, and regulatory changes, and assess their potential impact on the Bank
• Define, develop, implement, and manage standards, policies, procedures, and solutions that mitigate risk while maximizing security, service availability, and operational efficiency
• Build and maintain effective relationships across technology, business, and control functions to ensure alignment with enterprise and regulatory requirements
• Identify key issues, escalate them appropriately, and support remediation and risk treatment activities where required
• Contribute to business-specific, cross-functional, and enterprise initiatives as a subject matter expert, providing risk guidance and supporting complex reporting, analysis, and assessments ServiceNow Focus
• Perform extensive work within ServiceNow across multiple pillars and modules
• Support business-as-usual activities, including review and processing within Change Management, Incident Management, and Problem Management
• Contribute to ServiceNow process and module improvement initiatives
• Support ServiceNow product development and delivery activities
• Leverage knowledge of modules such as Change, Incident, Problem, TDAR, CMDB, and related reporting capabilities to support risk management, governance, and operational objectives Team and Leadership Expectations
• Continuously enhance knowledge and expertise in information security, risk, and ServiceNow capabilities
• Keep current on emerging trends, developments, and analytical tools relevant to the role
• Prioritize and manage workload effectively to deliver quality results within assigned timelines
• Support a positive work environment that promotes service, innovation, teamwork, and timely communication of issues and opportunities
• Identify and recommend opportunities to improve productivity, effectiveness, and operational efficiency
• Establish effective relationships across business and technology teams, program managers, and project managers
• Participate in knowledge sharing and knowledge transfer within the team and broader business unit
• Act as a key resource and subject matter expert in at least one technology niche, field, or line of business
Qualifications
• University degree or equivalent relevant experience
• 5-7 years of relevant experience in information security, technology controls, risk management, or a related field
• Sound knowledge and practical experience working with ServiceNow modules, including Change, Incident, Problem, TDAR, and CMDB
• Experience generating reports and analysis within ServiceNow
• Sound to advanced knowledge of organizational processes, technology controls, security, and risk issues • Experience contributing to projects of moderate to high complexity
We offer a competitive, people-first benefits package designed to support every aspect of your life:
Benefits
Why Join Capco
Use of Artificial Intelligence in Talent Acquisition
At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.
AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.
Why This Role Is Open
We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.
Inclusion at Capco
We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
Pay Transparency
The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.
Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.
Based on 1,588 disclosed Security salaries on RoleSuite, the role pays a median of $142K/year, with most offers between $114K and $180K (10th–90th percentile: $93K–$216K).
This posting lists $118K–$152K, in line with the $142K market median.
See the full Security salary breakdown →