Job Summary
The ServiceNow GRC, IRM Lead is responsible for leading the development, implementation, and on-going management of Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) processes using the ServiceNow platform. This role will involve working closely with various stakeholders to ensure that the organization’s risk and compliance requirements are met efficiently and effectively.
Key Responsibilities
- GRC and IRM Strategy: Develop and implement the organization’s GRC and IRM strategy using ServiceNow, aligning it with the company’s overall business objectives.
- ServiceNow Configuration: Configure and customize the ServiceNow GRC and IRM modules to meet the organization’s specific needs, ensuring data accuracy and security.
- Process Improvement: Identify opportunities to streamline and improve GRC and IRM processes, implementing best practices, automation, and workflow optimization.
- Policy and Compliance Management: Define, document, and maintain policies and standards that are compliant with industry regulations and company requirements. Monitor and report on compliance status.
- Risk Assessment: Conduct risk assessments to identify and assess potential risks to the organization, and develop mitigation strategies.
- Incident and Issue Management: Lead the management of security incidents and compliance-related issues, ensuring they are resolved in a timely manner.
- Reporting and Analytics: Generate and maintain reports and dashboards to provide insights into GRC and IRM performance, trends, and areas that require attention.
- Vendor and Third-Party Risk Management: Oversee the assessment and management of risks associated with third-party vendors and suppliers.
- Audit Support: Collaborate with internal and external auditors to ensure that GRC and IRM processes are auditable and compliant.
- Continuous Monitoring: Implement continuous monitoring processes to keep track of GRC and IRM activities and ensure proactive risk mitigation.
- Team Leadership: Manage a team of GRC and IRM professionals, providing guidance, mentoring, and performance evaluations
Qualifications
- 8+ years of experience in Servicenow GRC and IRM, with a proven track record of managing GRC and IRM initiatives
- Bachelor’s degree in a related field, such as Information Security, Risk Management.
- ServiceNow certification(s) related to GRC and IRM modules and any other Servicenow certification(s)
- Strong knowledge of industry standards, regulations, and best practices in GRC and IRM.
- Excellent project management and leadership skills.
- Strong analytical, problem-solving, and communication skills.
- Ability to work collaboratively with cross-functional teams and stakeholders.