Role purpose

Lead or support the functional implementation of ServiceNow Governance, Risk, and Compliance / Integrated Risk Management capabilities. The role translates approved governance and assurance processes into practical ServiceNow requirements and configurations, supports customer workshops, and helps deliver traceable, testable, and adoption-ready solutions.

·    Conduct discovery and process workshops with policy, compliance, risk, BCM, internal audit, control-owner, and technology stakeholders.

·    Assess current-state processes and define future-state workflows, roles, approvals, notifications, escalations, evidence needs, and reporting requirements.

·    Configure or guide configuration of applicable ServiceNow GRC/IRM capabilities in line with approved requirements, platform standards, and agreed scope.

·    Define entity, authority document, policy, control, risk, issue, indicator, continuity, audit, finding, remediation, and evidence relationships where applicable.

·    Prepare or review functional design documents, user stories, acceptance criteria, configuration workbooks, process flows, and traceability records.

·    Support data mapping and migration validation for policies, regulatory content, risks, controls, audits, findings, plans, and related historical records.

·    Support integration requirement definition and functional validation while coordinating technical design and development with the responsible integration team.

·    Prepare test scenarios; support system integration testing, UAT preparation, defect triage, remediation validation, and business sign-off.

·    Develop the end user training material and conduct end user training sessions before or after going live.

·    Provide demonstrations, knowledge transfer, administrator guidance, and functional handover documentation.

·    Advise stakeholders on practical use of out-of-box GRC/IRM capabilities and identify requests requiring customization, additional licensing, or change control.

·    Identify scope gaps, dependencies, risks, assumptions, and change requests early; avoid unsupported commitments or undocumented configuration.