ServiceNow IRM Senior Analyst

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure:
Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Lead the functional analysis and definition of enterprise Governance, Risk and Controls capabilities delivered through Service Now Integrated Risk Management. The role combines deep IRM platform knowledge, broad GRC domain expertise, and senior-level business analysis to turn complex risk, compliance, audit, and control needs into clear, scalable, testable solutions. The successful candidate will operate as the bridge between Risk, Compliance, Audit, Operations, Product Management, Architecture, Engineering, Data, and Testing teams.

The Senior Service Now IRM Business Analyst is the functional lead for one or more GRC capabilities and a subject matter expert in the end-to-end risk and control lifecycle. This individual leads discovery, process analysis, requirement definition, solution validation, and adoption activities for Service Now IRM. The role ensures that business outcomes, regulatory expectations, enterprise taxonomies, data standards, and platform best practices are reflected in the delivered solution.

This is not a generalist requirements role. The successful candidate should be able to challenge unclear requests, connect requirements across GRC disciplines, identify downstream impacts, and guide stakeholders toward consistent enterprise processes that favor sustainable, out-of-the-box platform capabilities over unnecessary customization.

Provide senior-level functional expertise across the Service Now IRM suite and the broader governance, risk, compliance, and audit ecosystem.

Connect requirements across the end-to-end lifecycle, including taxonomy and foundational data, identification and assessment, controls, testing and monitoring, issues and remediation, reporting, and assurance.

Advise stakeholders on fit-to-platform options, process standardization, reuse, and implications for adjacent capabilities.

Act as the functional owner for assigned capabilities from discovery through implementation, validation, deployment, and continuous improvement.

Plan and facilitate workshops with business, risk, compliance, audit, operations, data, and technology stakeholders.

Document current-state and target-state processes, business rules, decision points, roles, handoffs, data needs, controls, pain points, and expected outcomes.

Translate business and regulatory needs into unambiguous functional requirements, user stories, acceptance criteria, process flows, data definitions, and traceability artifacts.

Perform gap, impact, dependency, and root-cause analysis across processes, data, workflows, integrations, reporting, security roles, and operating-model responsibilities.

Maintain requirement quality throughout delivery, including versioning, approvals, traceability, and change control.

Partner with Product Owners, architects, engineers, platform teams, data teams, and test leads to shape scalable Service Now IRM solutions.

Lead functional design reviews and showbacks, confirm that proposed configurations satisfy business intent, and document decisions and tradeoffs.

Support backlog refinement, prioritization, sprint planning, dependency management, release planning, and readiness activities.

Identify where requests conflict with enterprise standards, duplicate existing functionality, introduce control gaps, or create unsustainable customization.

Support production triage and enhancement analysis by distinguishing defects, data issues, training gaps, process gaps, and new requirements.

Define end-to-end business scenarios and acceptance criteria spanning multiple IRM capabilities and lines of defense.

Coordinate functional validation and user acceptance testing, including test data, expected outcomes, defect clarification, retesting, and business sign-off.

Ensure process documentation, role guidance, training inputs, communications, support procedures, and reporting needs are ready for release.

Partner with change and business teams to drive adoption, capture feedback, and prioritize improvements based on business value and control outcomes.

Salary range is a good faith…