IRM Consultant

Job Summary

The Service Now IRM / GRC Consultant is responsible for designing, implementing, and optimizing Service Now Integrated Risk Management (IRM) and Governance, Risk, and Compliance (GRC) solutions. This role translates regulatory, audit, and risk requirements into scalable, automated workflows on the Service Now platform, enabling organizations to proactively manage risk, compliance, and assurance activities.

• Lead end-to-end implementations of Service Now IRM and GRC capabilities, including:
  • Risk Management
  • Policy and Compliance Management
  • Audit Management
  • Issue Management
  • Third-Party Risk Management (TPRM)
• Configure GRC data models, including risk statements, controls, control objectives, authority documents, and compliance requirements
• Map regulatory frameworks (SOX, SOC 2, ISO 27001, NIST, HIPAA, PCI) to Service Now GRC controls and policies
• Design and configure workflows using Flow Designer, UI Policies, Business Rules, and risk scoring logic
• Integrate IRM/GRC with CMDB, ITSM, Sec Ops, Vulnerability Response, and external vendor data
• Conduct GRC process assessments and gap analyses to align Service Now solutions with business and regulatory needs
• Build dashboards and reports for executive risk visibility, compliance status, audit findings, and remediation tracking
• Support UAT, go-live, and post-implementation optimization of IRM/GRC programs
• Create solution documentation, training materials, and governance best practices

• Bachelor’s degree in Information Systems, Risk Management, Business, or related field
• 2+ years of hands-on experience with Service Now IRM and/or GRC
• Strong understanding of Service Now platform architecture, tables, ACLs, roles, and workflows
• Experience configuring controls, risk registers, compliance requirements, and issue management
• Ability to translate regulatory language into Service Now GRC configurations

• Service Now certifications (CSA, CIS-GRC, IRM Implementation Specialist)
• Experience scripting in Service Now (Business Rules, Script Includes, Flow Designer)
• Background in audit, compliance, cybersecurity, or enterprise risk management
• Consulting experience delivering Service Now GRC/IRM implementations

• Service Now IRM & GRC configuration
• Risk, control, and compliance framework mapping
• Workflow automation and governance design
• Stakeholder facilitation and requirements gathering
• Reporting, dashboards, and executive communication

• Remote or hybrid, depending on organization
• Client-facing role with occasional travel
• Cross-functional collaboration with risk, audit, IT, and security teams