A complete application in a minute — tailored resume and cover letter, ready to send.
The HR Ally is seeking a ServiceNow GRC Technical Consultant in Sydney. The role focuses on designing, building, and configuring ServiceNow IRM/GRC modules to strengthen the organization’s risk and compliance posture.
You will automate testing, integrate data via REST/SOAP, maintain CMDB/CSDM alignment, and collaborate with IT, risk, audit and security teams to enable effective GRC processes.
Applicable to PR or Citizen of Australia only
Job Description (JD): ServiceNow GRC Technical Consultant
Key Responsibilities
Platform Configuration: Design, build, and configure ServiceNow Integrated Risk Management (IRM) / GRC modules Cybersecurity GRC ServiceNow IRM Developer. Automate compliance testing, evidence collection, and risk assessments
Framework Mapping: Translate complex regulatory and internal control requirements into technical system configurations and automated indicators
Reporting & Dashboards: Create executive‐level dashboards and key performance indicators (KPIs) to provide real‑time visibility into the organization's risk and compliance posture
Stakeholder Enablement: Act as a technical liaison between the IT, risk, audit, and security teams, guiding them in navigating GRC processes and tooling Cybersecurity GRC ServiceNow IRM Developer.
Platform Maintenance: Support platform upgrades, API integrations (REST, SOAP), and overall CMDB/CSDM data model alignment
Required Qualifications & Experience
Experience: Hands‑on experience with ServiceNow development and administration ServiceNow GRC
GRC / IRM Knowledge: Solid understanding of GRC principles, enterprise risk management, and control frameworks (e.g., SOX, ISO 27001, NIST, GDPR)
Soft Skills: Excellent analytical, problem‑solving, and stakeholder management skills
Preferred Certifications
ServiceNow: Certified System Administrator (CSA) and Certified Implementation Specialist - Risk and Compliance (CIS-RC) Service Net GRC
Risk/Audit: Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC)