ServiceNow GRC Developer

The Service Now GRC Developer is responsible for designing, configuring, developing, implementing, and supporting Service Now Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) solutions. The role delivers enterprise governance, compliance, risk management, audit management, business continuity, and third-party risk management capabilities while ensuring alignment with regulatory requirements, governance frameworks, and organizational risk objectives.

• Design, configure, and implement Service Now IRM/GRC solutions across Policy Management, Compliance Management, Audit Management, Risk Management, Business Continuity Management (BCM), and Third-Party Risk Management (TPRM).
• Develop and maintain policy lifecycle workflows, governance processes, policy acknowledgements, exceptions, waivers, and document management controls.
• Configure compliance frameworks, regulatory obligations, authority documents, control libraries, assessments, attestations, and remediation processes.
• Configure Operational Risk Management controls including RCSA, KRIs, KCIs, loss event management, and scenario analysis.
• Implement Business Continuity Management capabilities including BIA, recovery strategies, crisis management, testing programs, dependency mapping, and recovery plans.
• Configure Third-Party Risk Management processes including vendor onboarding, due diligence, risk assessments, questionnaires, monitoring, and remediation workflows.
• Configure Audit Management capabilities including audit planning, audit engagements, findings management, evidence management, and issue tracking.
• Develop Service Now customizations utilizing Business Rules, Script Includes, Client Scripts, UI Policies, ACLs, Flow Designer, Integration Hub, Notifications, Reports, and Dashboards.
• Design and develop executive dashboards, scorecards, compliance reports, audit reports, risk heatmaps, and KPI reporting capabilities.
• Integrate Service Now IRM with Active Directory, SharePoint, Microsoft Teams, CMDB, Service Mapping, Sec Ops, Vendor Portals, document repositories, and external enterprise systems.
• Support Agile delivery activities including sprint planning, backlog refinement, estimation, UAT support, deployment, and hypercare activities.
• Develop and maintain technical design documents, configuration documentation, knowledge transfer materials, and implementation guides.
• Ensure compliance with organizational governance standards, regulatory requirements, and Service Now development best practices.

• Bachelor's Degree in Computer Science, Information Systems, Information Technology, Engineering, or a related.
• Service Now Certified System Administrator (CSA).
• Service Now Certified Application Developer (CAD).
• Service Now Certified Implementation Specialist – IRM (CIS-IRM) .
• Agile or Scrum certifications.
• +5 years of Service Now development experience.
• Hands‑on Service Now GRC implementation experience.
• Proven experience delivering at least 2 full-cycle Service Now IRM implementations.
• Experience implementing one or more of the following:
• Policy & Compliance Management
• Audit Management
• Business Continuity Management (BCM)
• Third-Party Risk Management (TPRM)

• Service Now Integrated Risk Management (IRM).
• Service Now Governance, Risk & Compliance (GRC).
• Policy & Compliance Management.
• Audit Management.
• Business Continuity Management (BCM).
• Third-Party Risk Management (TPRM).
• Regulatory Change Management.
• Authority Documents & Regulatory Obligations.
• Risk Registers, KRIs, KCIs, and RCSA.
• Business Impact Analysis (BIA).
• Vendor Risk Assessment and Due Diligence.
• Control Testing and Compliance Assessments.
• Service Now Flow Designer.
• Glide API.
• Business Rules.
• Script Includes.
• Client Scripts.
• ACLs.
• REST/SOAP Integrations.
• Import Sets and Transform Maps.
• Service Now Reporting and Performance Analytics.
• Agile Delivery Methodologies.
• Source Control and Update Set Management.
• SAMA Regulatory Frameworks.
• NCA Essential Cybersecurity Controls (ECC).