ServiceNow GRC Implementation

Role & responsibilities

ServiceNow GRC Implementation

JD Overview:

We are seeking a ServiceNow GRC Implementation Contractor to configure, test, and deploy core GRC and CMDB capabilities. Working under the direction of the Head of GRC and in partnership with internal ServiceNow developers, this role will execute the implementation needed to deliver a unified platform for findings, risks, controls, policies, and application mappings.

Key Responsibilities

GRC/IRM Module Implementation

• Issue/Finding Management & Remediation Tracking
• Risk Register, Scoring, and Risk Acceptance/Exception workflows
• Control Library, Framework Mapping, and Control Applicability
• Compliance Assessments & Evidence Workflows
• Policy Management (inventory, ownership, lifecycle automation)
• Dashboards, heatmaps, and executive reporting

CMDB Integration & Alignment

• Ensure CMDB CI classes, attributes, and relationships required for GRC applicability are accurate and complete
• Validate CI data for application-to-control mappings and ownership
• Build or refine Transform Maps and workflows to bring CI data into GRC modules

Data Transformation & Migration

• Extract, standardize, cleanse, and prepare data sets for migration
• Load structured data for findings, risks, controls, policies, and application/CI mapping
• Reconcile and validate all migrated data

Testing, Deployment & Support

• Perform unit, integration, and UAT testing
• Resolve configuration issues and refine workflows based on feedback
• Support deployment planning, cutover, and post-go-live stabilization
• Participate in design reviews, working sessions, and sprint activities

Qualifications

• 5+ years of ServiceNow development and configuration experience, including GRC/IRM and CMDB
• Strong skills in scripting, Flow Designer, Transform Maps, and data modeling
• Experience with data migration, transformation, and data quality improvements
• Understanding of ITGC, SOX, risk and control frameworks, and policy governance
• ServiceNow System Administrator certification strongly preferred; CISRisk & Compliance a plus

Success Criteria

• Fully configured and tested GRC modules
• CMDB aligned to support control applicability
• Clean, validated baseline data migrated
• Smooth production deployment with minimal rework

Must-Have Certifications

1.

Good-to-Have (Preferred) Certifications

1

2

3

Certified Implementation Specialist – Risk and Compliance (CIS-R&C)

4

Preferred candidate profile

Yes