ServiceNow GRC Developer

Job Purpose:

The ServiceNow GRC Developer is responsible for designing, configuring, developing, implementing, and supporting ServiceNow Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) solutions. The role delivers enterprise governance, compliance, risk management, audit management, business continuity, and third-party risk management capabilities while ensuring alignment with regulatory requirements, governance frameworks, and organizational risk objectives.

Key Accountabilities:

• Design, configure, and implement ServiceNow IRM/GRC solutions across Policy Management, Compliance Management, Audit Management, Risk Management, Business Continuity Management (BCM), and Third-Party Risk Management (TPRM).
• Develop and maintain policy lifecycle workflows, governance processes, policy acknowledgements, exceptions, waivers, and document management controls.
• Configure compliance frameworks, regulatory obligations, authority documents, control libraries, assessments, attestations, and remediation processes.
• Implement enterprise risk management capabilities including risk registers, risk assessments, risk scoring, risk treatment plans, risk appetite, and risk reporting.
• Configure Operational Risk Management controls including RCSA, KRIs, KCIs, loss event management, and scenario analysis.
• Implement Business Continuity Management capabilities including BIA, recovery strategies, crisis management, testing programs, dependency mapping, and recovery plans.
• Configure Third-Party Risk Management processes including vendor onboarding, due diligence, risk assessments, questionnaires, monitoring, and remediation workflows.
• Configure Audit Management capabilities including audit planning, audit engagements, findings management, evidence management, and issue tracking.
• Develop ServiceNow customizations utilizing Business Rules, Script Includes, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, Notifications, Reports, and Dashboards.
• Design and develop executive dashboards, scorecards, compliance reports, audit reports, risk heatmaps, and KPI reporting capabilities.
• Integrate ServiceNow IRM with Active Directory, SharePoint, Microsoft Teams, CMDB, Service Mapping, SecOps, Vendor Portals, document repositories, and external enterprise systems.
• Support Agile delivery activities including sprint planning, backlog refinement, estimation, UAT support, deployment, and hypercare activities.
• Develop and maintain technical design documents, configuration documentation, knowledge transfer materials, and implementation guides.
• Ensure compliance with organizational governance standards, regulatory requirements, and ServiceNow development best practices.

Minimum Qualifications:

• Bachelor's Degree in Computer Science, Information Systems, Information Technology, Engineering, or a related.
• ServiceNow Certified System Administrator (CSA).
• ServiceNow Certified Application Developer (CAD).
• ServiceNow Certified Implementation Specialist – IRM (CIS-IRM) .
• ITIL Foundation certification.
• Agile or Scrum certifications.

Minimum Experience:

• 5 years of ServiceNow development experience.
• Hands-on ServiceNow GRC implementation experience.
• Proven experience delivering at least 2 full-cycle ServiceNow IRM implementations.
• Experience implementing one or more of the following:
• Policy & Compliance Management
• Audit Management
• Enterprise Risk Management
• Operational Risk Management
• Business Continuity Management (BCM)
• Third-Party Risk Management (TPRM)

Job-Specific Skills:

• ServiceNow Integrated Risk Management (IRM).
• ServiceNow Governance, Risk & Compliance (GRC).
• Policy & Compliance Management.
• Audit Management.
• Enterprise Risk Management (ERM).
• Operational Risk Management (ORM).
• Business Continuity Management (BCM).
• Third-Party Risk Management (TPRM).
• Regulatory Change Management.
• Authority Documents & Regulatory Obligations.
• Risk Registers, KRIs, KCIs, and RCSA.
• Business Impact Analysis (BIA).
• Vendor Risk Assessment and Due Diligence.
• Control Testing and Compliance Assessments.
• ServiceNow Flow Designer.
• JavaScript.
• Glide API.
• Business Rules.
• Script Includes.
• Client Scripts.
• UI Policies.
• ACLs.
• REST/SOAP Integrations.
• Import Sets and Transform Maps.
• ServiceNow Reporting and Performance Analytics.
• Agile Delivery Methodologies.
• Source Control and Update Set Management.
• SAMA Regulatory Frameworks.
• NCA Essential Cybersecurity Controls (ECC).