Ameriprise Financial—ServiceNow Platform Data Security Engineering- Manager

Job description

Description: About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP. Job Description We are seeking a highly skilled ServiceNow Platform Security Engineering Lead to architect and implement secure, scalable, and data-driven solutions within the ServiceNow ecosystem. This role will focus on platform-level security, identity and access management, and data engineering, ensuring compliance, governance, performance, and reliability across ServiceNow modules and integrations. Key Responsibilities - ServiceNow Authorization & Authentication Engineering - Design and implement secure authentication mechanisms using SAML 2.0, OAuth 2.0, LDAP, and Multi-Factor Authentication (MFA). - Architect and manage Role-Based Access Control (RBAC) across ServiceNow modules, ensuring least-privilege access and separation of duties. - Define and enforce Access Control Lists (ACLs) at the table, field, and record levels to protect sensitive data. - Implement Scoped Application permissions to isolate functionality and restrict access to specific modules or components. - Define and own User groups and locations in the platform. - Develop and maintain user provisioning and de-provisioning workflows integrated with enterprise IAM systems. - Monitor and audit login activity, session management, and access violations using native ServiceNow tools - Collaborate with InfoSec and IAM teams to align ServiceNow access policies with enterprise security standards and compliance frameworks. - Security Strategy & Compliance - Define and enforce compliance to security policies, standards, and best practices for the ServiceNow platform in alignment with ServiceNow recommended Platform security shared responsibility model. - Ensure service now platform is compliant with internal and external infosec requirements and industry best practices - Establish governance frameworks for secure development, data protection, and risk mitigation. - Data Privacy, Security & Encryption - Defining/Implement Service Now data classification, data retention & data discovery strategy in alignment with Ameriprise data management policies /standards - Implement data encryption strategy at rest, in transit & encryption key management - Determining the data collection, storage, usage, sharing, archiving, and destruction policy of data processed in ServiceNow instances. - Monitor access patterns and system activity to identify potential security threats. - Secure Integrations & Automation - Ensure and mature secure API management for integrations between ServiceNow and third-party security tools (e.g., Active Directory, CyberArk and Aveksa, Azure AD, RIM, IAM). - Ensure secure data exchange and prevent unauthorized access to ServiceNow instances. - Leadership & Collaboration - Mentor platform engineers and developers on secure coding, identity management, and data handling best practices. - Collaborate with cybersecurity, data, and infrastructure teams to ensure platform alignment with enterprise architecture. - Lead technical design reviews, platform governance, and roadmap planning for platform security aspects Required Skills & Qualifications: Technical Expertise: - ServiceNow Security: Deep understanding of SecOps, GRC, RBAC, ACLs, and platform security best practices. - Cybersecurity & Compliance: Strong knowledge of security frameworks (NIST, ISO 27001, CIS), regulatory compliance, and risk management. - Access & Identity Management: Expertise in SSO, MFA, OAuth, LDAP, and user authentication. - Integration & Development: Experience with REST APIs, JavaScript, OAuth, and secure integration practices. - Cloud Security: Understanding of SaaS security, encryption methods, and cloud-based security models. Certifications - ServiceNow Certifications: - Certified System Administrator (CSA) - Certified Implementation Specialist – SecOps or GRC Preferred Qualifications: - Experience securing large-scale ServiceNow implementations in regulated industries (finance, healthcare, government). - Strong problem-solving, analytical, and communication skills to interact with technical and non-technical stakeholders. - Knowledge of emerging security trends, zero trust architecture, and AI-driven security solutions. - Cybersecurity Certifications: - Certified Information Systems Security Professional (CISSP) - Certified Information Security Manager (CISM) Experience Required: - 15+ years of IT security experience, with 12+ years in ServiceNow security architecture, administration, or operations. - Hands-on experience in security automation, incident response, and risk management using ServiceNow. - Prior experience working with cybersecurity, risk management, and IT governance teams. In-Office Collaboration We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process. Full-Time/Part-Time Full time Timings (2:00p-10:30p) India Business Unit AWMPO AWMP&S President's Office Job Family Group Technology Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law. We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.