SERVICENOW GRC IMPLEMENTATION

SERVICENOW GRC IMPLEMENTATION

4 Months

Stamford, Connecticut

ONSITE

JD Overview:

We are seeking a ServiceNow GRC Implementation Contractor to configure, test, and deploy core GRC and CMDB capabilities. Working under the direction of the Head of GRC and in partnership with internal ServiceNow developers, this role will execute the implementation needed to deliver a unified platform for findings, risks, controls, policies, and application mappings.

Key Responsibilities:

GRC/IRM Module Implementation

Issue/Finding Management & Remediation Tracking

Risk Register, Scoring, and Risk Acceptance/Exception workflows

Control Library, Framework Mapping, and Control Applicability

Compliance Assessments & Evidence Workflows

Policy Management (inventory, ownership, lifecycle automation)

Dashboards, heatmaps, and executive reporting

CMDB Integration & Alignment:

Ensure CMDB CI classes, attributes, and relationships required for GRC applicability are accurate and complete

Validate CI data for application-to-control mappings and ownership

Build or refine Transform Maps and workflows to bring CI data into GRC modules

Data Transformation & Migration:

Extract, standardize, cleanse, and prepare data sets for migration

Load structured data for findings, risks, controls, policies, and application/CI mapping

Reconcile and validate all migrated data

Testing, Deployment & Support:

Perform unit, integration, and UAT testing

Resolve configuration issues and refine workflows based on feedback

Support deployment planning, cutover, and post-go-live stabilization

Participate in design reviews, working sessions, and sprint activities

Qualifications:

5+ years of ServiceNow development and configuration experience, including GRC/IRM and CMDB

Strong skills in scripting, Flow Designer, Transform Maps, and data modeling

Experience with data migration, transformation, and data quality improvements

Understanding of IT SOX, risk and control frameworks, and policy governance

ServiceNow System Administrator certification strongly preferred; CIS Risk & Compliance a plus

Success Criteria:

Fully configured and tested GRC modules

CMDB aligned to support control applicability

Clean, validated baseline data migrated

Smooth production deployment with minimal rework

Must-Have Certifications:

1. ServiceNow Certified System Administrator (CSA) Foundation certification required for almost all ServiceNow roles.

Good-to-Have (Preferred) Certifications

1 ServiceNow CIS Security Incident Response (CIS-SIR) Useful when GRC interacts with SecOps processes.

2 ServiceNow CIS Vulnerability Response (CIS-VR) Helps when VR is integrated with risk and compliance modules.

3 ServiceNow GRC / IRM Certification

Certified Implementation Specialist Risk and Compliance (CIS-R&C)

4 ServiceNow Certified Application Developer (CAD) Preferred if the role requires scripting, custom app creation, or advanced configuration.