ServiceNow GRC Developer

Job Overview

The ServiceNow GRC Developer is tasked with designing, configuring, and implementing robust ServiceNow Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) solutions. This role supports enterprise capabilities in governance, compliance, audit management, risk management, business continuity, and third-party risk management, aligning with regulatory standards and organizational risk strategies.

Primary Responsibilities

• Design, configure, and deploy ServiceNow IRM/GRC modules including Policy Management, Compliance, Audit, Risk, Business Continuity, and Third-Party Risk Management.
• Develop and manage workflows for policy lifecycles, governance processes, policy acknowledgements, exceptions, waivers, and document controls.
• Configure compliance frameworks with regulatory obligations, authority documents, control libraries, assessments, attestations, and remediation processes.
• Implement enterprise risk management functions such as risk registers, assessments, scoring, treatment plans, risk appetite settings, and risk reporting.
• Set up operational risk controls including RCSA, KRIs, KCIs, loss event management, and scenario analyses.
• Develop business continuity management solutions encompassing BIA, recovery strategies, crisis management, testing, dependency mapping, and recovery planning.
• Manage third-party risk workflows including vendor onboarding, due diligence, risk assessments, questionnaires, monitoring, and remediation.
• Implement audit management capabilities including planning, engagements, findings and evidence handling, and issue tracking.
• Create customizations using Business Rules, Script Includes, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, Notifications, Reports, and Dashboards.
• Design executive dashboards and reports such as scorecards, audit reports, risk heatmaps, and KPIs.
• Integrate IRM with systems like Active Directory, SharePoint, Microsoft Teams, CMDB, Service Mapping, SecOps, Vendor Portals, document repositories, and other enterprise tools.
• Participate in Agile practices: sprint planning, backlog grooming, estimation, user acceptance testing support, deployment, and hypercare post-deployment.
• Prepare technical design documents, configuration guides, knowledge transfer materials, and implementation documentation.
• Ensure adherence to organizational governance policies, regulatory compliance, and ServiceNow development best practices.

Qualifications & Certifications

• Bachelor's degree in Computer Science, IT, Engineering, or a similar discipline.
• Certified ServiceNow System Administrator (CSA).
• Certified ServiceNow Application Developer (CAD).
• Certified Implementation Specialist for IRM (CIS-IRM).
• ITIL Foundation certification.
• Agile or Scrum certification.

Experience Requirements

• Over 5 years of practical experience in ServiceNow development.
• Hands-on expertise in implementing ServiceNow GRC solutions.
• Delivered minimum two full lifecycle implementations of ServiceNow IRM projects.
• Experience in one or more of the following domains: Policy & Compliance Management, Audit Management, Enterprise Risk Management, Operational Risk Management, Business Continuity Management, and Third-Party Risk Management.

Technical Skills

• ServiceNow Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) modules.
• Policy & Compliance Management solutions.
• Audit Management and Enterprise Risk Management (ERM).
• Operational Risk Management (ORM) and Business Continuity Management (BCM).
• Third-Party Risk Management (TPRM).
• Regulatory Change Management and authority document handling.
• Risk identification tools such as risk registers, KRIs, KCIs, and RCSA methodology.
• Business Impact Analysis (BIA) processes.
• Vendor risk assessment and due diligence protocols.
• Control testing and compliance assessment techniques.
• ServiceNow development using Flow Designer, JavaScript, Glide API, Business Rules, Script Includes, Client Scripts, UI Policies, ACLs, REST/SOAP integrations, Import Sets, and Transform Maps.
• Experience with ServiceNow reporting and Performance Analytics.
• Agile delivery methodologies including source control and update set management.
• Familiarity with SAMA regulatory frameworks and NCA Essential Cybersecurity Controls (ECC).