ServiceNow GRC / IRM Implementation Consultant

Role purpose Lead or support the functional implementation of Service. Now Governance, Risk, and Compliance / Integrated Risk Management capabilities. The role translates approved governance and assurance processes into practical Service. Now requirements and configurations, supports customer workshops, and helps deliver traceable, testable, and adoption-ready solutions.

Requirements

• Conduct discovery and process workshops with policy, compliance, risk, BCM, internal audit, control-owner, and technology stakeholders.
• Assess current-state processes and define future-state workflows, roles, approvals, notifications, escalations, evidence needs, and reporting requirements.
• Configure or guide configuration of applicable Service. Now GRC/IRM capabilities in line with approved requirements, platform standards, and agreed scope.
• Define entity, authority document, policy, control, risk, issue, indicator, continuity, audit, finding, remediation, and evidence relationships where applicable.
• Prepare or review functional design documents, user stories, acceptance criteria, configuration workbooks, process flows, and traceability records.
• Support data mapping and migration validation for policies, regulatory content, risks, controls, audits, findings, plans, and related historical records.
• Support integration requirement definition and functional validation while coordinating technical design and development with the responsible integration team.
• Prepare test scenarios; support system integration testing, UAT preparation, defect triage, remediation validation, and business sign-off.
• Develop the end user training material and conduct end user training sessions before or after going live.
• Provide demonstrations, knowledge transfer, administrator guidance, and functional handover documentation.
• Advise stakeholders on practical use of out-of-box GRC/IRM capabilities and identify requests requiring customization, additional licensing, or change control.
• Identify scope gaps, dependencies, risks, assumptions, and change requests early; avoid unsupported commitments or undocumented configuration.

Benefits

Mandatory experience and knowledge

• At least 5 years of relevant GRC, assurance, resilience, or Service. Now consulting experience, including at least 3 years of hands-on Service. Now implementation exposure.
• Hands-on practitioner or implementation experience in at least one of the following domains: Compliance Management, Business Continuity Management, or Internal Audit. Experience in more than one is strongly preferred.
• Demonstrated Service. Now GRC/IRM implementation experience involving at least one relevant product area such as Policy and Compliance, Risk, Audit, or BCM.
• Working knowledge of controls, evidence, issues/findings, remediation, approvals, attestations, assessments, reporting, and audit trails.
• Ability to facilitate business workshops and convert business needs into implementable and testable functional requirements.
• Experience supporting UAT, defect resolution, data validation, and deployment readiness.
• Fluent Arabic language proficiency, spoken and written, is mandatory for this role given direct workshop facilitation with Arabic-speaking policy, compliance, risk, BCM, and audit stakeholders. Preferred experience
• Experience with enterprise or regulated organizations, especially banking or financial services.
• Exposure to regulatory and control frameworks such as SAMA, ISO 27001, ISO 22301, ISO 31000, COSO, COBIT, NIST, or equivalent.
• Experience with third-party risk, operational resilience, regulatory change, control testing, indicators, or issue management.
• Ability to review Service. Now configuration and flows and communicate effectively with developers and architects. Academic and professional certifications
• Required: Relevant bachelor’s degree such as Information Systems, Computer Science, Engineering, Business Administration, Risk Management, Accounting, Finance, or a related discipline.
• Required: Service. Now Certified System Administrator (CSA).
• Required or to be obtained within the agreed onboarding period: Service. Now Certified Implementation Specialist – Risk and Compliance (CIS-RC).
• Required: At least one relevant professional certification appropriate to the candidate’s domain depth, such as CISA, CIA, CRISC, CGEIT, ISO 27001 Lead Implementer/Lead Auditor, ISO 22301 Lead Implementer/Lead Auditor, CBCI/CBCP, PMI-RMP, or equivalent.
• Strongly preferred: Postgraduate qualification in risk, audit, compliance, resilience, information systems, or business administration. Core competencies GRC process design and analytical thinking Service. Now functional configuration Workshop facilitation and stakeholder management Requirements traceability and documentation Quality, testing, and evidence discipline Scope, dependency, and risk management .