Key Responsibilities
- Design, develop, configure, and implement ServiceNow GRC solutions based on business and compliance requirements.
- Work on ServiceNow Integrated Risk Management (IRM), Policy and Compliance Management, Risk Management, Audit Management, and related GRC applications.
- Configure risk and control frameworks, control objectives, indicators, policies, compliance entities, and risk assessments.
- Develop and customize ServiceNow applications using JavaScript, Business Rules, Client Scripts, Script Includes, UI Policies, UI Actions, and Flow Designer.
- Configure workflows, approvals, notifications, scheduled jobs, and automated compliance processes.
- Implement integrations with external systems using REST APIs, SOAP APIs, IntegrationHub, and import sets.
- Configure dashboards, reports, and Performance Analytics to provide visibility into risk and compliance metrics.
- Support control testing, evidence collection, issue remediation, audit workflows, and compliance assessments.
- Collaborate with business stakeholders, risk managers, compliance teams, auditors, and technical teams to translate requirements into technical solutions.
- Perform unit testing, system integration testing, defect resolution, and production support.
- Maintain technical documentation, configuration records, and implementation guidelines.
- Follow ServiceNow development best practices, security standards, upgrade guidelines, and application lifecycle management processes.
Required Technical Skills
- Hands-on experience with ServiceNow GRC/IRM applications.
- Strong knowledge of Policy and Compliance Management, Risk Management, and Audit Management.
- Experience configuring risk and control frameworks, control testing, risk assessments, issues, and remediation workflows.
- Proficiency in JavaScript and ServiceNow scripting.
- Experience with Business Rules, Client Scripts, Script Includes, UI Policies, Flow Designer, and Service Catalog where applicable.
- Knowledge of REST/SOAP integrations, IntegrationHub, import sets, and transform maps.
- Experience with ACLs, roles, groups, notifications, reports, and dashboards.
- Familiarity with ServiceNow application development, update sets, and deployment practices.
- Understanding of GRC processes, internal controls, regulatory compliance, and audit requirements.
Certification Requirements
- Mandatory: ServiceNow Certified Implementation Specialist – Governance, Risk, and Compliance (CIS-GRC).
- ServiceNow Certified System Administrator (CSA) is preferred.
- Additional ServiceNow IRM/GRC certifications or relevant implementation credentials are an advantage.
Preferred Qualifications
- Experience implementing or enhancing ServiceNow GRC/IRM solutions in an enterprise environment.
- Familiarity with compliance frameworks such as ISO 27001, NIST, SOX, and PCI DSS.
- Experience integrating GRC solutions with ITSM, CMDB, Security Operations, or third-party risk and compliance systems.
- Strong analytical, troubleshooting, communication, and stakeholder management skills.
- Ability to work independently and collaborate effectively with functional and technical teams.
Education
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
Key Success Criteria
- Successful delivery of ServiceNow GRC/IRM enhancements and implementations.
- Effective automation of risk and compliance processes.
- Improved visibility into risk, controls, audit findings, and remediation activities.
- High-quality, secure, maintainable ServiceNow configurations and customizations.
- Timely delivery of enhancements, integrations, documentation, and production support.
Note: Candidates should be able to demonstrate hands-on ServiceNow GRC/IRM implementation experience in addition to holding the required CIS-GRC certification.