• Manage security governance programs, SOX IT controls coordination, customer and vendor security reviews, client-facing security engagements, regulatory and compliance assessments, and cross-functional security initiatives. • Act as the single point of contact (SPOC) for security governance matters across Conifer, ensuring alignment with enterprise security requirements, client obligations, regulatory standards, and business objectives. • Lead Conifer’s security governance activities, ensuring adherence to corporate security policies, regulatory requirements, and industry best practices. • Coordinate and manage SOX IT General Controls (ITGC) activities, control testing, remediation efforts, evidence collection, and audit support. • Support internal and external audits, including SOX, SOC, client audits, and regulatory assessments. • Track compliance initiatives and monitor remediation activities through completion. • Facilitate governance forums and provide regular updates to executive leadership. • Serve as the primary security representative for client security inquiries, assessments, and due diligence activities. • Lead customer security reviews, questionnaires, RFP/RFI responses, and security presentations. • Build trusted relationships with client security, compliance, legal, and technology stakeholders. • Partner with Sales, Client Services, and Operations teams to address customer security requirements during contract negotiations and ongoing service delivery. • Manage Conifer’s third-party security risk management processes. • Conduct security reviews and risk assessments for vendors, partners, and service providers. • Coordinate remediation plans with vendors and internal stakeholders. • Ensure compliance with vendor security requirements, contractual obligations, and client expectations. • Maintain vendor security risk documentation and reporting. • Serve as Conifer’s primary liaison to Tenet Enterprise Security, Risk, and Compliance organizations. • Coordinate the adoption and implementation of enterprise security initiatives across Conifer. • Ensure alignment between Conifer-specific requirements and Tenet cybersecurity standards. • Identify, assess, and monitor information security, operational, and third-party risks. • Support enterprise risk management activities, risk reporting, and mitigation planning. • Track security findings and corrective actions through closure. • Assist in the development and maintenance of security policies, standards, and procedures. • Develop executive-level reporting, dashboards, and risk metrics. • Present security program status, compliance updates, and risk assessments to senior leadership. • Drive cross-functional collaboration among Security, Compliance, Legal, Operations, Technology, and Client Services teams.

Company Description It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started. Join us to put AI to work for people. Job Description The ServiceNow Security Organization (SSO) The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact We employ the brightest and most forward-thinking Security Professionals on the planet. We have offices around the world and work as a global team. Come join the Office of the CISO and help set the bar for cloud security! What you get to do in this role: ServiceNow’s Office of the CISO team leverages its diverse security background and expertise to help enhance ServiceNow’s security and communicate ServiceNow’s security features to the world. The team works closely with various departments in ServiceNow’s security organization and with sales, legal, IT, and product teams on security-related topics. Most importantly, the Office of the CISO team works with prospects, customers, and partners to address questions related to the security of ServiceNow’s cloud-based service. This team values integrity, quality, expertise, precision, communication, and efficiency and is looking for a Cloud Security Professional with a broad security background and excellent communication skills. You will be a member of the AMS team of the Office of the CISO in English and French-speaking countries. As a valued member of our esteemed team, you will assume the pivotal role of a Cloud Security Professional. Your mission encompasses ensuring unwavering support for the Sales Team in both pre- and post-sales endeavors. You will expertly navigate questionnaires and address customer inquiries. Your proactive engagement will extend to driving impactful security meetings with customers and delivering compelling presentations at conferences, both internal and external. As a leader in security conversations, you will skillfully rebut cloud and AI technology myths and provide invaluable support during Security Incidents and Investigations. Collaborating seamlessly with internal teams, you will be key in resolving security issues arising from investigations and conducting thorough postmortems to guarantee comprehensive remediation. Should the need arise, you will spearhead structural or design changes, propelling the security posture of our cloud environment and elevating the subscription service to new heights. Your expertise and dedication will be instrumental in safeguarding the integrity and excellence of our cloud security initiatives. This role may require access to a Protected B cloud environment. The successful candidate must be eligible to obtain and maintain a Government of Canada Reliability Status under PSPC's Contract Security Program. Clearance is a condition of employment in this function. The company will sponsor and support the screening process through its designated Company Security Officer. Key Responsibilities: - Lead multifaceted security conversations, primarily focused on Canada Finserv customers and prospects. - Understanding security concerns associated with Artificial Intelligence solution implementations involving Agentic AI and GenAI. - Support ServiceNow’s Sales Teams in Pre- and Post-Sales efforts - Respond to prospect and customer questions related to security. - Conduct security calls with customers - Respond to security questionnaires - Present and evangelize on AI and cloud adoption & assurance. - Contribute to the overall messaging and positioning of the Security Office - Coordinate and manage end-to-end customer cloud security experience. - Active participation in Security Industry forums, communities, and standards organizations - Participation in discussions & presentations with Partners and Customers - Investigate and understand cloud and AI threats. - Escalation point for Security Incidents & investigations - Work with internal teams to resolve security issues arising from investigations and incidents and conduct post mortem’s to ensure issues are properly remediated - Propose & develop structural/design changes to advance the security posture of ServiceNow (Voice of the Customer). - Lead cross-functional teams to accomplish your goals. - Contribute to contract negotiations related to security terms. Qualifications Requirements: - Minimum 12 years experience in IT & 5 years in Cloud Security Candidate must be eligible to obtain and hold a reliability status in Canada. - Solid understanding of security concerns associated with Artificial Intelligence solution implementations involving Agentic AI and GenAI. - Expertise in Financial Services security and regulations desired. - Excellent communication and presentation skills (i.e. strong interpersonal and customer-facing skills) - Experience with Cloud Operations (either as a customer or provider) is required. - Expertise in enterprise cyber defense techniques - Desired Industry Certifications: CISSP, CISM, CSSP, CEH or equivalent - A general understanding of ITIL and ITSM. - Understanding of the sales life cycle. - Expertise in Threat analysis and enterprise cyber defense techniques - Deep understanding of Security Operations. - Ability to articulate complex issues to executives and customers. - Strong interpersonal skills. - Self-motivated and driven; ability to perform and excel with little supervision. - Able to serve as an authoritative source on security. - Excellent collaborator and teammate; Fluent in English. French speaking a plus. #SecurityJobs Additional Information Work Personas We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service. Equal Opportunity Employer ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.  Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.

• Partner with engineering teams to perform security reviews, threat modeling, and risk assessments • Develop and maintain scalable security tools for automating vulnerability detection • Contribute to security architecture reviews for new product platforms • Support the operations of BugCrowd bug bounty program • Serve as a product security point of contact for security incidents • Work closely with Software, Platform, Mobile, and Infrastructure engineering teams • Continuously evaluate emerging threats and vulnerabilities • Participate in the team's on-call rotation

• Application Security & Secure Development: Partner with engineering teams to perform security reviews, threat modeling, and risk assessments for product features, APIs, mobile applications, and backend services. Provide actionable and risk-calibrated guidance that helps Lime ship securely without slowing down. • Security Tooling & Automation: Develop and maintain scalable security tools and pipelines to automate vulnerability detection, dependency scanning, and security testing across the software development lifecycle. Contribute to and extend our security pipeline and CI/CD security gates (SAST, DAST, SCA, secrets management). • Security Architecture & Design Reviews: Contribute to security architecture reviews for new product platforms and features. Evaluate authentication and authorization designs, API security posture, and data handling practices to ensure risks are identified and addressed early. • Bug Bounty & External Programs: Support the operations of our BugCrowd bug bounty program, including triage, researcher communication, remediation coordination, and internal validation of reported findings. • Incident Response: Serve as a product security point of contact for security incidents affecting Lime's applications and services. Contribute to investigation, root-cause analysis, corrective action, and post-incident improvement. • Cross-functional Partnership & Mentorship: Work closely with Software, Platform, Mobile, and Infrastructure engineering teams to embed security into development workflows. Share knowledge, drive security-by-default practices, and mentor engineers and peers on product security fundamentals. • Stay Ahead of the Threat Landscape: Continuously evaluate emerging threats, vulnerabilities, and regulatory requirements (including EU CRA) relevant to Lime's product and infrastructure stack. Bring proactive recommendations to the team. • Participate in the team's on-call rotation, responding to incidents, troubleshooting issues, and contributing to root cause analysis and service reliability improvements. • Respond to and troubleshoot production issues, outages, and critical alerts during assigned on-call shifts. • Escalate incidents as needed and collaborate with team members to restore service. • Document issues and contribute to improvements that reduce recurring incidents. • Be available to provide occasional after-hours, weekend, and holiday support while on call.