ServiceNow GRC / IRM – Lead Solution Advisor

Role Title: Service. Now GRC / IRM – Lead Solution Advisor Experience: 5–7 years relevant Service. Now (GRC/IRM) Primary Modules Needed: IRM (Integrated Risk Management), SIR (Security Incident Response), VR (Vulnerability Response), TPRM (Third Party Risk Management), BCM (Business Continuity Management) Certifications (Must): Service.

Now CSA (Certified System Administrator) Responsibilities Lead configuration + development on Service. Now with strong understanding of platform security, operations, and exception handling. Define solution architecture for Service. Now implementations (data/object model, workflows, access controls). Convert requirements into epics/user stories , build mock-ups, and drive delivery hands-on.

Own end-to-end use case delivery: workflow configuration, customizations, testing support, and deployments to higher environments. Conduct code reviews and enforce Service. Now best practices. Build/maintain integrations using APIs/web services/connectors. Enable/support internal teams with training and complex configuration guidance.

Support pre-sales / solution discussions within the domain when needed. Must-have skills 5–7 years Service. Now experience with strong IRM/GRC delivery exposure. Hands-on with: Workspace, UI Builder, Flow Designer / complex workflows. Strong scripting/config: Business Rules, Client Scripts, UI Policies, UI Scripts, UI Actions, UI Pages, Script Includes, ACLs.

Integrations: REST/SOAP/APIs and connectors (preferred). Platform management: deployments, upgrades, troubleshooting. Delivered 2–3+ end-to-end projects (req → build → go-live). Strong documentation + communication; able to work with distributed teams. Good-to-have Sec. Ops / IRM implementations: Risk, Audit, Policy, Vendor Risk, SIR, VR, TPRM.

Exposure to ITAM / SAM / HAM / CMDB. Certifications: CAD, CIS – Risk & Compliance, CIS – SIR, CIS – TPRM, CIS – VR. Knowledge of GRC roadmap + tools like RSA Archer / Metric. Stream. Team / domain context The work sits within Cyber Strategy & Transformation : governance, risk assessments, compliance, third-party risk, security posture programs, cyber transformation, risk analytics & reporting.