ServiceNow GRC

Key Responsibilities

Functional Responsibilities

• Lead ServiceNow GRC/IRM implementation, enhancement, and support projects.
• Gather and analyze business requirements related to Governance, Risk, and Compliance.
• Configure and customize ServiceNow GRC modules to meet business needs.
• Design and implement risk and compliance management frameworks.
• Conduct workshops with business stakeholders and compliance teams.
• Define risk assessment processes, controls, and compliance requirements.
• Support audit planning, execution, and remediation activities.

ServiceNow GRC Modules

Hands-on experience with one or more of the following modules:

• Policy and Compliance Management
• Risk Management
• Audit Management
• Vendor Risk Management (VRM)
• Third-Party Risk Management (TPRM)
• Business Continuity Management (BCM)
• Operational Resilience Management
• Privacy Management
• Regulatory Change Management

Technical Responsibilities

• Configure workflows, business rules, UI policies, client scripts, and notifications.
• Develop and maintain ServiceNow GRC dashboards and reports.
• Create and maintain ACLs, catalog items, forms, and workflows.
• Perform integrations using:
• REST APIs
• SOAP APIs
• MID Server
• IntegrationHub
• Support data migration and transformation activities.
• Collaborate with ServiceNow platform teams for enhancements and upgrades.

Project Responsibilities

• Participate in end-to-end implementation projects.
• Prepare requirement documents, solution designs, and implementation plans.
• Execute SIT, UAT, and production deployments.
• Provide post-implementation support and troubleshooting.
• Work closely with client stakeholders, business users, and leadership teams.

Mandatory Skills

• 5 to 13 years of overall IT experience.
• 3+ years of ServiceNow GRC/IRM experience.
• Strong experience in:
• Risk Management
• Compliance Management
• Audit Management
• Policy Management
• Hands-on ServiceNow platform configuration experience.
• Experience with workflows, Flow Designer, and IntegrationHub.
• Knowledge of governance and compliance frameworks:
• ISO 27001
• NIST
• SOX
• COBIT
• GDPR
• PCI-DSS
• Strong understanding of IT Risk and Cybersecurity concepts.