ServiceNow GRC Consultant

Devoteam; Riyadh; On-site; SAR 224,000 - 300,000; Full time

Job summary

A leading technology firm in Riyadh is seeking a highly skilled ServiceNow Consultant to join their cybersecurity team. The ideal candidate will have hands-on experience in ServiceNow GRC and a solid grasp of Governance, Risk, and Compliance principles. They will gather and analyze requirements, design workflows, and conduct gap assessments to support client compliance with local cyber regulations. The role offers professional growth in a collaborative environment.

Qualifications

• Proven hands-on experience in ServiceNow GRC modules (Policy & Compliance, Risk, Audit, Vendor Risk).
• Strong background in business analysis, requirements documentation, and stakeholder engagement.
• Understanding of Governance, Risk, and Compliance concepts and frameworks.

Responsibilities

• Act as a Business Analyst and Developer for ServiceNow GRC implementations.
• Gather, analyze, and document business and technical requirements.
• Design and develop workflows, integrations, and dashboards within ServiceNow GRC.
• Provide advisory on GRC frameworks and industry best practices.
• Conduct gap assessments and deliver tailored GRC roadmaps.

Skills

ServiceNow GRC modules

Business analysis

Stakeholder engagement

Governance, Risk, and Compliance concepts

Communication skills

Tools

GRC platforms and tools

Job description

Company Description

Tech for People Unlocks the Future

At Devoteam, we believe that technology, combined with strong human values, can actively drive change for the better. Discover how Tech for People is shaping the future, creating a positive impact on individuals and the world around us.

With over 25 years of passion for technology and a presence in 18+ countries across EMEA and beyond, we are committed to leveraging innovation, expertise, and human-centric values to make a difference.

Devoteam Culture & Values :

True innovation is born from a powerful culture, fused with meaningful values.

Culture : Fair and courageous

Everyone is treated fairly – this fuels bravery. At Devoteam, we always make fair decisions. We listen and are willing to be challenged, taking courageous decisions as a result. We help our employees to progress at every step and congratulate those who deserve it.

Ambition and results

Ambition is nurtured at every step – this drives results. We are ambitious entrepreneurs with a taste for performance, growth and celebrating success. Commitments are always kept as we seek to achieve profitable growth to create value and employment. We aim to bring as much value as possible to our clients, at every touchpoint.

Learning and innovating

Curiosity and learning are at our core – this stimulates innovation. At Devoteam, we are curious. We learn and embrace innovation constantly to meet challenges and build partnerships of excellence.

Caring and sharing

A caring attitude is infused into our culture – this encourages sharing. We believe in the power of teams, we promote support and collaboration.

At Devoteam, we care about our teams and want to work in a positive, productive environment. We support the development of talent and careers,

Values : 1. Respect

2. Frankness

3. Passion

Knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.

To know more about us, please visit :

Job Description

We are looking for a highly skilled ServiceNow Consultant with hands-on experience in ServiceNow GRC to join our cybersecurity team. This role combines business analysis, development, and functional consulting, requiring a solid grasp of Governance, Risk, and Compliance principles and the ability to translate business needs into scalable technical solutions.

Key Responsibilities :

• Act as a Business Analyst and Developer for ServiceNow GRC implementations, upgrades, and customizations.
• Gather, analyze, and document business and technical requirements from stakeholders.
• Design and develop workflows, integrations, and dashboards within ServiceNow GRC.
• Provide advisory on GRC frameworks (ISO 27001, NIST, COBIT, etc.) and industry best practices
• Support client readiness for compliance with local Saudi cyber regulations (, NCA, SAMA, CITC).
• Conduct gap assessments and deliver tailored GRC roadmaps and remediation plans.

Qualifications

Proven hands-on experience in ServiceNow GRC modules (Policy & Compliance, Risk, Audit, Vendor Risk).

Strong background in business analysis, requirements documentation, and stakeholder engagement

Working knowledge of leading GRC platforms and tools in the market.

Understanding of Governance, Risk, and Compliance concepts and frameworks.

Familiarity with Saudi cybersecurity regulations is a strong plus.

Excellent communication skills, both technical and non-technical.

Additional Information

Business Unit : Cyber Trust

Level : Junior - Mid Level