Senior ServiceNow GRC Developer

Position Title: Senior ServiceNow GRC Developer

Location: Vienna, VA

Basic Qualifications:

• 7 years of experience in ServiceNow development and platform engineering
• 3 years of deep technical expertise specifically within the ServiceNow GRC/IRM ecosystem
• Advanced proficiency in ServiceNow scripting (JavaScript, Glide), Flow Designer, IntegrationHub, and the IRM/GRC Metadata structure
• Experience with risk frameworks (NIST, ISO, COBIT, or SOC2) and how they map to technical controls within ServiceNow

Required Skills:

• Lead technical teams through complex, multi-module implementations
• Explain complex technical risk architectures to non-technical stakeholders (Audit, Legal, and Executive Leadership)

Preferred Qualifications:

• Mentor a team of developers in GRC-specific configurations, including Advanced Risk Assessments, PA (Performance Analytics) for risk dashboards, and UI Builder for executive reporting

Role and responsibilities:

• Translate complex regulatory requirements and enterprise risk strategies into scalable, secure, and automated workflows
• Lead the technical design and implementation of ServiceNow GRC/IRM modules, including Policy and Compliance, Risk Management, Audit Management, Vendor Risk Management (VRM), and Business Continuity Management (BCM)
• Build and oversee automated indicators, control testing workflows, and evidence collection processes to reduce manual intervention and improve audit readiness
• Define and enforce coding best practices specifically for IRM data models, ensuring solutions are upgrade-safe and aligned with the ServiceNow CSDM (Common Service Data Provider) framework
• Design secure integrations between the GRC suite and external data sources (e.g., Azure AD, BitSight, Security Operations, and Financial systems) to provide a real-time view of the firm's risk posture
• Be a bridge between Technology, Information Security, Legal, and Internal Audit to translate "legalese" and policy into functional technical requirements
• Manage technical debt within the GRC scope, driving proactive performance tuning and ensuring the platform scales with our international growth