GRC SME – ServiceNow Implementation

Experience

Requirements and Deliverables

• Lead the design, configuration, and implementation of GRC modules in the ServiceNow platform.
• Ensure alignment of ServiceNow GRC functionalities with ISO 27001, PCI-DSS, ISO 22301, and SAMA regulatory compliance requirements.
• Develop and maintain internal and external audit readiness processes, facilitating evidence collection and management through the ServiceNow GRC platform.
• Drive GRC automation initiatives to streamline risk, compliance, policy, and audit management workflows.
• Collaborate with stakeholders to translate regulatory requirements into platform capabilities and controls.
• Provide guidance and training to teams on ServiceNow GRC tools and best practices.
• Manage end-to-end project lifecycle including planning, execution, monitoring, and delivery of ServiceNow GRC implementations.
• Deliver compliance reports, dashboards, and metrics leveraging ServiceNow capabilities.

Skill Set

• Deep understanding of ISO 27001 (Information Security Management), PCI-DSS (Payment Card Industry Data Security Standard), ISO 22301 (Business Continuity Management), and SAMA regulatory framework.
• Expertise in Governance, Risk, and Compliance processes and tool implementation, specifically with ServiceNow GRC platform.
• Strong internal and external audit experience, with proficiency in audit evidence management and control testing.
• Hands-on experience with GRC automation and workflow design within ServiceNow.
• Excellent project management skills including resource coordination, timeline management, and milestone tracking.
• Strong analytical, problem-solving, and communication skills to effectively interact with technical teams and business stakeholders.

Experience

• Minimum 15 years of relevant experience in Governance, Risk, and Compliance with proven ServiceNow GRC platform implementation exposure.
• Extensive experience in conducting and facilitating internal and external audits aligned with key security frameworks and regulatory standards.
• Demonstrable experience in evidence readiness and compliance reporting using automated GRC solutions.
• Prior experience managing large-scale GRC projects from conception through deployment and ongoing maintenance.
• Certifications (Should have)
• Certified ISO 27001 Lead Implementer or Auditor
• Certified ISO 22301 Lead Implementer or Auditor