ServiceNow Developer

SCOPE OF WORK: SMUD is issuing this Request for Proposal to engage a qualified resource to provide a leased employee to support our continued build out and maturing of ServiceNow's Integrated Risk Management (IRM) and Continuous Authorization and Monitoring (CAM) modules. This initiative will help to better align SMUD's Cybersecurity Risk Program with NIST's Cybersecurity and Risk Management Frameworks (CSF/RMF).

client is seeking a leased employee for technical database administrator and developer assistance in maturing our development of ServiceNow's Continuous Authorization and Monitoring (CAM) module. In support of the aforementioned, client is looking for technical expertise to review, consult, improve upon, and continue development of our existing integration to further our progress towards centralizing organizational-level common control, business system and application-level assessment & authorization packages; to include security control attestation and supporting documentation/evidence collection.

To successfully integrate with SMUD's Cybersecurity Risk Team's current approach, it is important that the leased employee have a strong understanding of NIST's Cybersecurity (CSF) and Risk Management Frameworks (RMF), and familiarity with navigating Security and Privacy Controls for Information Systems and Organizations (NIST SP 800-53). Technical assistance is also being sought to support the modification of existing ServiceNow workflows maintained by other SMUD business areas, as well as creation of new workflows to support Cybersecurity Risk Team process efficiencies.