Cyber Security Engineer Technology Asset Management

JOB OVERVIEW

Function Overview

The Digital and Technology team at General Mills stands as the largest and foremost unit, dedicated to exploring the latest trends and innovations in technology while leading the adoption of cutting-edge technologies across the organization. Collaborating closely with global business teams, the focus is on understanding business models and identifying opportunities to leverage technology for increased efficiency and disruption. The team's expertise spans a wide range of areas, including AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain, SAP S4 HANA and Enterprise Architecture. The MillsWorks initiative embodies an delivery model, where business and technology teams operate cohesively in pods with a unified mission to deliver value for the company. Employees working on significant technology projects are recognized as Digital Transformation change agents.

The team places a strong emphasis on service partnerships and employee engagement with a commitment to advancing equity and supporting communities. In fostering an inclusive culture, the team values individuals passionate about learning and growing with technology, exemplified by the "Work with Heart" philosophy, emphasizing results over facetime. Those intrigued by the prospect of contributing to the digital transformation journey of a Fortune 500 company are encouraged to explore more details about the function through the following Link

Purpose of the role

The Cyber Security Technology Asset Management (TAM) Engineer is a key member of the IT Security team, responsible for contributing to the strategic planning, execution, monitoring, and continuous improvement of the enterprise Configuration Management Process, with a focus on security and compliance. This role involves working on the architecture, maintenance, and enhancement of the Configuration Management Database (CMDB) within the ServiceNow environment, ensuring data accuracy and completeness to facilitate effective IT asset management. This role requires collaboration with team members and stakeholders, contributing to solution roadmaps and ensuring the successful execution of TAM initiatives. The engineer will also focus on platform development within ServiceNow, including ITOM discovery, integrations, and process automation through scripting, while adhering to security best practices.

KEY ACCOUNTABILITIES

• CMDB Architecture & Governance: Lead the design, implementation, and ongoing governance of the CMDB, ensuring data integrity, accuracy, and compliance with industry best practices and regulatory requirements. Develop and implement a comprehensive CMDB strategy aligned with enterprise IT goals. Establish and maintain key performance indicators (KPIs) to measure CMDB health and effectiveness. Mentor junior team members in CMDB best practices.
• Configuration Management Strategy & Execution: Develop and implement a comprehensive configuration management strategy, collaborating with senior stakeholders to define requirements, technical specifications, and roadmaps. Lead the design and implementation of solutions for capturing configuration data from diverse sources, including cloud environments and legacy systems. Oversee the review and configuration of significant IT infrastructure changes to ensure accurate CMDB reflection.
• ServiceNow Platform Leadership: Lead the design, development, implementation, and maintenance of ServiceNow solutions (including business rules, scripts, UI components, integrations, and workflows) to enhance CMDB functionality, automation, and reporting capabilities. Provide expert-level troubleshooting and support. Establish and enforce ServiceNow development standards and best practices.
• Automation & Orchestration: Lead the development and implementation of automated solutions to streamline CMDB processes, improve data quality, and reduce manual effort. Develop and maintain robust integration pipelines between the CMDB and other systems using various technologies (e.g., REST APIs, web services, scripting).
• Integration & API Management: Architect, develop, and maintain complex integrations between the CMDB and other enterprise systems (e.g., SSO, SAS connectors, legacy systems, security information and event management (SIEM) systems). Manage APIs, ensuring seamless data flow and security.
• Strategic Technology Leadership: Collaborate with senior infrastructure architects and process owners to align TAM strategies with overall IT technology goals. Lead and participate in strategic planning sessions, contributing to the development of the overall IT roadmap. Proactively identify and address emerging technology trends and their impact on CMDB management.
• Team Leadership & Mentorship: Lead, mentor, and develop a team of junior TAM engineers. Provide guidance, training, and support to ensure team members are proficient in CMDB management and ServiceNow development. Foster a collaborative and supportive team environment.
• Process Improvement & Innovation: Continuously identify and implement process improvements to optimize CMDB management and overall IT asset lifecycle management. Proactively seek out and implement innovative solutions to improve efficiency and effectiveness. Stay current on industry best practices and emerging technologies.
• Problem Solving & Escalation Management: Resolve complex issues related to patch management, releases, upgrades, and CMDB data discrepancies. Conduct root cause analysis and implement preventative measures. Manage escalations from junior team members.
• Documentation & Knowledge Sharing: Develop and maintain comprehensive documentation for processes, procedures, and technical solutions. Share knowledge and best practices with the team and other stakeholders. Contribute to the development of internal training materials and knowledge base articles.

MINIMUM QUALIFICATIONS

• Education Full time graduation from an accredited university (Mandatory- Note: This is the minimum education criteria which cannot be altered)
• 7-9 years of experience with ServiceNow's ITOM suite (CMDB, Discovery, Service Mapping, Event Management, Workflows), with at least 3 years in senior technical roles.
• Proven experience leading the design and implementation of complex CMDB integrations and automation projects.
• Strong understanding of ITAM principles, including configuration management, lifecycle management, and compliance requirements.
• Experience leading and mentoring a team of engineers.
• Experience troubleshooting and resolving complex issues related to horizontal discovery and pattern creation.
• Proficiency in multiple scripting languages (e.g., JavaScript, Python) and data formats (XML, JSON), regular expressions (REGEX), and database connectivity (JDBC, ODBC).
• Understanding of networking concepts (routers, switches, firewalls, NAT, load balancing), cloud platforms (GCP, AWS, Azure), and security best practices.
• Excellent communication, collaboration, presentation, and problem-solving skills.
• Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint, Teams).

PREFERRED QUALIFICATIONS

• ServiceNow certifications (Certified System Administrator (CSA), Certified Implementation Specialist Discovery, Certified Implementation Specialist - Service Mapping, and other relevant ServiceNow certifications).
• Experience with IT asset management tools such as NetBrain, ScienceLogic, TrueSight, or Infoblox.
• Experience with Agile development methodologies.
• Familiarity with common audit, compliance, and regulatory standards related to Configuration Management and CIs (e.g., SOX, HIPAA, PCI DSS).
• Experience with ITIL framework.
• Proven track record of successfully leading and delivering complex IT projects.
• Relevant security certifications (e.g., CISSP, CISM, CISA).
• Experience with security frameworks such as NIST Cybersecurity Framework, ISO 27001, etc.
• Experience with security tools and technologies (e.g., SIEM, vulnerability scanners, intrusion detection systems).
• Experience with security incident response and vulnerability management.