Cybersecurity Grc Servicenow Irm Developer

F5 F5 · Enterprise · Hyderabad, India

This role focuses on configuring and optimizing the ServiceNow IRM/GRC platform to strengthen enterprise risk and compliance programs. It involves operationalizing business continuity and disaster recovery, building risk assessment frameworks, and creating GRC dashboards and reports. The goal is to make GRC processes more efficient and impactful, ensuring continuous compliance with frameworks like SOC 2 and ISO 27001.

What you'd actually do

  1. Execute advanced techno-functional configuration within the ServiceNow IRM/GRC platform, including the design and deployment of automated workflows, development of risk and control indicators, and ongoing administration of risk registers to support a dynamic and accurate risk inventory.
  2. Support the full operationalization of Business Continuity Management (BCM) and Disaster Recovery (DR) programs within ServiceNow, including facilitating Business Impact Analysis (BIA) activities, maintaining continuity plans, and systematically tracking and documenting DR exercise outcomes.
  3. Build a technical risk assessments framework across internal systems and third-party vendors, automating identified findings, risk ratings, and remediation actions are accurately captured, and tracked, within the ServiceNow platform.
  4. Build, maintain, and continuously improve advanced GRC dashboards and reports within ServiceNow, delivering real-time, actionable visibility into the organization's overall risk and compliance posture for senior leadership and key stakeholders.
  5. Deliver a proactive monitor, testing, and technical controls validation process within IRM to maintain ongoing compliance with industry frameworks including SOC 2 and ISO 27001, with a focus on automating evidence collection and control testing to reduce manual effort and increase program efficiency.

Skills

Required

  • 7+ years of hands-on experience in Cyber GRC, IT Audit, Information Security, or a closely related discipline.
  • Demonstrated proficiency with ServiceNow IRM/GRC modules, including Policy & Compliance Management, Risk Management, Audit Management, and Vendor Risk Management (VRM).
  • Practical, working experience supporting Business Continuity Management (BCM) and Disaster Recovery (DR) programs, including tool administration, plan maintenance, and exercise coordination.
  • Solid understanding of ServiceNow's technical development components including Flow Designer, Business Rules, and Client Scripts and how they are applied to build and optimize GRC workflows.
  • Proven ability to translate complex regulatory and compliance requirements into clear, actionable functional system configurations and platform requirements.
  • Hands-on experience with Snowflake and Tableau (or comparable BI/analytics platforms) for building compliance and operational reporting, data analysis pipelines, and executive-facing dashboards.

Nice to have

  • ServiceNow Certified System Administrator (CSA)
  • CISA
  • CRISC

What the JD emphasized

  • SOC 2
  • ISO 27001
  • ServiceNow IRM/GRC
  • Business Continuity Management (BCM)
  • Disaster Recovery (DR)