ServiceNow GRC Developer

Job Purpose:The ServiceNow GRC Developer is responsible for designing, configuring, developing, implementing, and supporting ServiceNow Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) solutions. The role delivers enterprise governance, compliance, risk management, audit management, business continuity, and third-party risk management capabilities while ensuring alignment with regulatory requirements, governance frameworks, and organizational risk objectives.Key Accountabilities:Design, configure, and implement ServiceNow IRM/GRC solutions across Policy Management, Compliance Management, Audit Management, Risk Management, Business Continuity Management (BCM), and Third-Party Risk Management (TPRM).Develop and maintain policy lifecycle workflows, governance processes, policy acknowledgements, exceptions, waivers, and document management controls.Configure compliance frameworks, regulatory obligations, authority documents, control libraries, assessments, attestations, and remediation processes.Implement enterprise risk management capabilities including risk registers, risk assessments, risk scoring, risk treatment plans, risk appetite, and risk reporting.Configure Operational Risk Management controls including RCSA, KRIs, KCIs, loss event management, and scenario analysis.Implement Business Continuity Management capabilities including BIA, recovery strategies, crisis management, testing programs, dependency mapping, and recovery plans.Configure Third-Party Risk Management processes including vendor onboarding, due diligence, risk assessments, questionnaires, monitoring, and remediation workflows.Configure Audit Management capabilities including audit planning, audit engagements, findings management, evidence management, and issue tracking.Develop ServiceNow customizations utilizing Business Rules, Script Includes, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, Notifications, Reports, and Dashboards.Design and develop executive dashboards, scorecards, compliance reports, audit reports, risk heatmaps, and KPI reporting capabilities.Integrate ServiceNow IRM with Active Directory, SharePoint, Microsoft Teams, CMDB, Service Mapping, SecOps, Vendor Portals, document repositories, and external enterprise systems.Support Agile delivery activities including sprint planning, backlog refinement, estimation, UAT support, deployment, and hypercare activities.Develop and maintain technical design documents, configuration documentation, knowledge transfer materials, and implementation guides.Ensure compliance with organizational governance standards, regulatory requirements, and ServiceNow development best practices.

Minimum Qualifications

Bachelor's Degree in Computer Science, Information Systems, Information Technology, Engineering, or a related.ServiceNow Certified System Administrator (CSA).ServiceNow Certified Application Developer (CAD).ServiceNow Certified Implementation Specialist – IRM (CIS-IRM) .ITIL Foundation certification.Agile or Scrum certifications.Minimum Experience:+5 years of ServiceNow development experience.Hands-on ServiceNow GRC implementation experience.Proven experience delivering at least 2 full-cycle ServiceNow IRM implementations.Experience implementing one or more of the following:Policy & Compliance ManagementAudit ManagementEnterprise Risk ManagementOperational Risk ManagementBusiness Continuity Management (BCM)Third-Party Risk Management (TPRM)Job-Specific Skills:ServiceNow Integrated Risk Management (IRM).ServiceNow Governance, Risk & Compliance (GRC).Policy & Compliance Management.Audit Management.Enterprise Risk Management (ERM).Operational Risk Management (ORM).Business Continuity Management (BCM).Third-Party Risk Management (TPRM).Regulatory Change Management.Authority Documents & Regulatory Obligations.Risk Registers, KRIs, KCIs, and RCSA.Business Impact Analysis (BIA).Vendor Risk Assessment and Due Diligence.Control Testing and Compliance Assessments.ServiceNow Flow Designer.JavaScript.Glide API.Business Rules.Script Includes.Client Scripts.UI Policies.ACLs.REST/SOAP Integrations.Import Sets and Transform Maps.ServiceNow Reporting and Performance Analytics.Agile Delivery Methodologies.Source Control and Update Set Management.SAMA Regulatory Frameworks.NCA Essential Cybersecurity Controls (ECC).