Job Description

Senior ServiceNow GRC Consultant (GRC | BCM | TPRM)

Location: Riyadh, Saudi Arabia
Experience: 7–12+ Years
Employment Type: Full-Time
Relocation: Candidates must be willing to relocate to Riyadh, Saudi Arabia.

We are seeking an experienced Senior ServiceNow GRC Consultant to lead the design, implementation, customization, and optimization of ServiceNow Governance, Risk & Compliance (GRC) solutions. The ideal candidate will have strong expertise in ServiceNow Integrated Risk Management (IRM), Business Continuity Management (BCM), Third-Party Risk Management (TPRM), Policy & Compliance, and platform development. The role requires extensive experience in solution architecture, workflow automation, integrations, and implementation of regulatory compliance frameworks.

Key Responsibilities

• Design, architect, and implement end-to-end ServiceNow GRC/IRM solutions following industry best practices.
• Lead requirement gathering, solution design, technical architecture, and implementation activities.
• Configure and customize ServiceNow GRC modules including:
  • Integrated Risk Management (IRM)
  • Policy & Compliance
  • Business Continuity Management (BCM)
  • Third-Party Risk Management (TPRM)
  • Risk Management
  • Audit Management
• Conduct entity scoping exercises and design enterprise GRC data models.
• Configure policies, controls, indicators, risk frameworks, assessments, attestation campaigns, audit test plans, and compliance processes.
• Customize workflows using Flow Designer, Integration Hub, and Workflow Engine.
• Develop custom and scoped ServiceNow applications.
• Build and customize Service Portal components and widgets.
• Develop and maintain Business Rules, Script Includes, Client Scripts, UI Policies, UI Actions, Scheduled Jobs, Fix Scripts, Email Inbound Actions, and Notifications.
• Design, develop, and maintain REST and SOAP integrations with enterprise systems.
• Develop Scripted REST APIs and Scripted SOAP Services.
• Configure authentication mechanisms including OAuth 2.0, Certificates, and MID Server integrations.
• Develop and customize Integration Hub Spokes.
• Implement Performance Analytics dashboards and KPI reporting.
• Review existing ServiceNow implementations and recommend improvements aligned with ServiceNow best practices.
• Collaborate with business stakeholders, security teams, auditors, and compliance teams to deliver enterprise governance solutions.
• Ensure scalable, secure, and maintainable ServiceNow implementations.
• Stay updated with the latest ServiceNow platform capabilities, releases, and GRC enhancements.

Required Technical Skills

ServiceNow Platform

• ServiceNow IRM (Integrated Risk Management)
• Governance, Risk & Compliance (GRC)
• Business Continuity Management (BCM)
• Third-Party Risk Management (TPRM)
• Policy & Compliance
• Risk Management
• Audit Management
• Performance Analytics
• Service Portal
• Flow Designer
• Integration Hub
• Integration Hub Spokes
• MID Server

Development

• JavaScript
• Glide API
• Business Rules
• Script Includes
• Client Scripts
• UI Policies
• UI Actions
• Fix Scripts
• Scheduled Jobs
• Email Inbound Actions
• Notifications
• Scoped Applications
• Service Portal Widgets

Integration

• REST APIs
• SOAP APIs
• Scripted REST APIs
• Scripted SOAP Services
• OAuth 2.0
• Certificate-based Authentication
• Web Services
• JSON
• XML

Compliance & Governance

• Governance, Risk & Compliance (GRC)
• Business Continuity Management (BCM)
• Third-Party Risk Management (TPRM)
• Enterprise Risk Management
• Policy Management
• Compliance Management
• Audit Management
• Internal Controls
• Risk Frameworks
• Assessments
• Attestation
• Control Testing

Required Experience

• 7–12+ years of overall IT experience.
• 5+ years of hands-on experience implementing ServiceNow GRC/IRM solutions.
• Strong understanding of Governance, Risk & Compliance concepts and methodologies.
• Proven experience designing enterprise ServiceNow GRC architectures.
• Extensive experience configuring and customizing ServiceNow GRC modules.
• Experience developing enterprise integrations using REST, SOAP, and Integration Hub.
• Hands-on experience with Service Portal customization and widget development.
• Experience building custom ServiceNow applications.
• Strong scripting and automation experience within the ServiceNow platform.
• Experience implementing Performance Analytics dashboards and reporting.
• Experience conducting entity scoping and governance assessments.
• Experience reviewing and optimizing existing ServiceNow implementations.
• Strong understanding of ServiceNow platform architecture, plugins, and accelerators.

Regulatory & Industry Knowledge

Candidates should have experience implementing governance and compliance requirements aligned with one or more of the following:

• SAMA Cybersecurity Framework
• NCA ECC (Essential Cybersecurity Controls)
• IT Governance Framework (ITGF)
• Business Continuity Management (BCM)
• ISO 27001
• ISO 22301
• ISO 31000
• GDPR
• COBIT
• NIST
• PCI DSS (preferred)

Preferred Certifications

• ServiceNow Certified System Administrator (CSA)
• ServiceNow Certified Application Developer (CAD)
• ServiceNow Certified Implementation Specialist – Risk and Compliance (CIS-RC)
• ServiceNow Certified Implementation Specialist – IRM (preferred)
• ServiceNow Certified Technical Architect (CTA) (preferred)
• ITIL Foundation Certification
• ISO 27001 Lead Implementer or Lead Auditor (preferred)
• CRISC, CISA, or CGEIT (preferred)