ServiceNow Developer – GRC / IRM — Phoenix, AZ

Role Overview

We are seeking an experienced ServiceNow Developer with strong hands-on expertise in Integrated Risk Management (IRM) / Governance, Risk & Compliance (GRC). This role involves designing, configuring, and enhancing ServiceNow applications that support enterprise risk management, policy and compliance, control testing, assessments, and issue remediation.

The ideal candidate combines strong ServiceNow development skills with a solid understanding of risk and compliance processes to deliver scalable, secure, and upgrade-safe solutions.

Locations - Phoenix, New York

Key Responsibilities

• Configure and enhance IRM/GRC modules: Risk, Controls, Compliance, RCSA, Assessments, Indicators, Issues & Remediation

• Configure and enhance Risk Management and Policy and Compliance Management, including risk assessments, controls, indicators, issues, and remediation workflows.

• Configure the IRM entity framework, including entity types, entities, risk statements, control objectives, and their relationships.

• Develop Risk and Control Self-Assessment (RCSA) workflows, assessment templates, scoring methodologies, and approval processes.

• Implement inherent and residual risk scoring, control effectiveness assessments, and risk response workflows.

• Configure policy and compliance processes, including authority documents, control mappings, attestations, evidence collection, and control testing.

• Build risk and control indicators to support continuous monitoring, issue identification, and remediation tracking.

• Configure and extend ServiceNow Playbooks, including stages, activities, triggers, and reusable flows to guide users through risk, compliance, and remediation processes.

• Develop automation using Flow Designer, subflows, Business Rules, Script Includes, Client Scripts, UI Policies, and scheduled jobs.

• Configure tables, forms, Access Control Lists (ACLs), roles, and data policies while prioritizing out-of-the-box capabilities and minimizing customization.

• Build integrations and data imports using REST APIs, IntegrationHub, Import Sets, and Transform Maps.

• Support IRM relationships with relevant business services, applications, and CMDB records.

• Participate in requirements gathering, solution design, development, testing, documentation, deployment, and production support.

• Partner with Risk, Compliance, Audit, and IT stakeholders to translate business requirements into effective technical solutions.

Required Skills and Experience

• 5+ years of hands-on ServiceNow development experience, including 3+ years implementing or enhancing IRM/GRC applications.

• Experience delivering at least one production IRM/GRC implementation or significant enhancement.

• Strong functional knowledge of Risk Management, Policy and Compliance Management, RCSA, assessments, controls, indicators, and issue remediation.

• Hands-on experience with the IRM entity framework and relationships among risks, controls, policies, and entities.

• Experience configuring risk assessment methodologies, scoring models, control testing, and approval workflows.

• Proven experience configuring and extending ServiceNow Playbooks.

• Strong development skills in JavaScript, Glide APIs, Business Rules, Script Includes, Client Scripts, and REST integrations.

• Strong knowledge of Flow Designer, ACLs, role-based access, and ServiceNow platform configuration.

• Experience with testing, defect resolution, update sets or application deployment, and release management.

• Familiarity with applicable regulations, standards, and frameworks, such as SOX, NIST CSF, PCI DSS, ISO/IEC 27001, or HIPAA.

• Strong communication, analytical, and problem-solving skills, with the ability to work directly with business and technical stakeholders.

Preferred Qualifications:

• Certifications: CSA, CIS-Risk, CIS-GRC, CIS-IRM, CAD.

• Experience supporting financial services, insurance, healthcare, or other regulated industries.