Skill Requirements: ServiceNow IRM, Playwright, and ATF (Mandatory)
Job Summary:
We are seeking a Contract IRM Automation Engineer to support the DT GRC Continuous Control Monitoring (CCM) program at ServiceNow. This hands-on technical role focuses on automating control testing and evidence collection across GRC frameworks (SOX, NIST, CMMC). You will partner with the IRM engineering team to build and configure automated control indicators, translating control requirements into ServiceNow automation logic to monitor control effectiveness and produce audit-ready evidence.
Key Responsibilities:
- Configure pre-built ServiceNow IRM connectors to downstream systems (identity platforms, data warehouses, PAM tools, etc.).
- Build integrations and API calls to pull control evidence from source systems.
- Manage service account credentials and API access for downstream system connections.
- Write ServiceNow native scripting logic for control indicators, translating control requirements into deterministic pass/fail rules.
- Validate that automated indicators produce correct, audit-compliant output.
- Work with control owners and GRC stakeholders to understand evidence requirements and validate automation accuracy.
- Partner with the engineering team to troubleshoot integration issues and optimize indicator logic.
- Document integration patterns and automation logic for knowledge transfer.
- Troubleshoot false positives and indicator breakdowns.
- Perform enhancements to existing automation as needed.
Required Skills & Qualifications:
- 8+ years of hands-on ServiceNow platform experience, with demonstrated expertise in indicator scripting and/or automation logic.
- Strong understanding of GRC concepts, specifically how controls are defined, tested, and evidenced for compliance frameworks (SOX, internal audit, etc.).
- Experience configuring ServiceNow connectors and building integrations with external systems via APIs.
- Comfortable managing API credentials, service accounts, and integration security.
- Ability to translate control requirements (e.g., "MFA must be enforced") into machine-evaluable automation rules.
- Experience working with downstream system admins and API documentation to identify integration points.
- Self-directed learner able to ramp up quickly in a matrixed environment.
- Comfortable troubleshooting integration and scripting issues with engineering support.
Preferred Skills (Nice to Have):
- Prior experience in GRC, IRM, risk management, or compliance domains.
- Familiarity with identity and access management systems (SailPoint, Zscaler, etc.), data platforms (Snowflake, MDM), or privileged access management tools.
- Experience with ServiceNow Performance Analytics or control monitoring workflows.
- Exposure to audit standards and control frameworks.
- ServiceNow GRC certification or experience.
Never miss an opportunity! Create an alert based on the job you applied for.
