Senior Security Incident Commander

ServiceNow’s Security Incident Command (SIC) team is seeking a senior security incident commander to join our fast-growing team. This role will support the orchestration of incident response strategy and communications during critical information security-related incidents.

The SIC team maintains and executes the Major Security Incidents (MSI) lifecycle within ServiceNow, including Preparation, Response, and Recovery. Orchestration of response and remediation of incident response for highest criticality security events. Take ownership and lead response to critical incidents within the company.

Prepare and deliver communications, including executive summaries and incident briefings, to key stakeholders during and after incident response. Conduct rapid response, mitigation, and investigations on the highest priority cases impacting ServiceNow and user data. Contribute to the organization and completion of Post-Incident Reviews (PIRs) and Root Cause Analyses (RCAs) following major security incidents. Identify new ways to simplify, integrate, automate and refine the major security incident process to better support internal and external stakeholders.