ServiceNow GRC Developer

EJADA; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

EJADA in Saudi Arabia is seeking a skilled ServiceNow GRC Developer to design, configure, implement, and support IRM and GRC solutions. You will enable policy management, compliance, audit, BCM, and third-party risk across the enterprise while aligning with regulatory requirements and corporate risk objectives.

Responsibilities include building policy workflows, setting up controls, dashboards, and integrations with Active Directory, SharePoint, and other enterprise systems, plus supporting

Qualifications

• Bachelor's degree in CS/IT/Engineering or related field.
• ServiceNow CSA, CAD, and CIS-IRM certifications are required.
• 5+ years of ServiceNow development experience with GRC/IRM implementations.

Responsibilities

• Design, configure, and implement ServiceNow IRM/GRC solutions across modules.
• Develop policy lifecycle workflows and governance processes.
• Configure compliance frameworks, control libraries, and remediation workflows.
• Create executive dashboards and KPI reporting.
• Integrate ServiceNow with enterprise systems and enable Agile delivery.

Skills

IRM

Policy & Compliance

Audit Management

BCM

TPRM

GRC

RCSA

KRIs/KCIs

BIA

Vendor Risk

Regulatory Change

REST/SOAP

Flow Designer

Glide API

SAMA ECC

NCA ECC

Education

Bachelor's Degree in CS/IT/Engineering

ServiceNow CSA

ServiceNow CAD

CIS-IRM

Agile/Scrum Certification

Tools

Flow Designer

Glide API

REST/SOAP Integrations

Import Sets

Transform Maps

Update Sets

NCA ECC Tools

Job description

The ServiceNow GRC Developer is responsible for designing, configuring, developing, implementing, and supporting ServiceNow Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) solutions. The role delivers enterprise governance, compliance, risk management, audit management, business continuity, and third-party risk management capabilities while ensuring alignment with regulatory requirements, governance frameworks, and organizational risk objectives.

Key Accountabilities:

• Design, configure, and implement ServiceNow IRM/GRC solutions across Policy Management, Compliance Management, Audit Management, Risk Management, Business Continuity Management (BCM), and Third-Party Risk Management (TPRM).
• Develop and maintain policy lifecycle workflows, governance processes, policy acknowledgements, exceptions, waivers, and document management controls.
• Configure compliance frameworks, regulatory obligations, authority documents, control libraries, assessments, attestations, and remediation processes.
• Configure Operational Risk Management controls including RCSA, KRIs, KCIs, loss event management, and scenario analysis.
• Implement Business Continuity Management capabilities including BIA, recovery strategies, crisis management, testing programs, dependency mapping, and recovery plans.
• Configure Third-Party Risk Management processes including vendor onboarding, due diligence, risk assessments, questionnaires, monitoring, and remediation workflows.
• Configure Audit Management capabilities including audit planning, audit engagements, findings management, evidence management, and issue tracking.
• Develop ServiceNow customizations utilizing Business Rules, Script Includes, Client Scripts, UI Policies, ACLs, Flow Designer, IntegrationHub, Notifications, Reports, and Dashboards.
• Design and develop executive dashboards, scorecards, compliance reports, audit reports, risk heatmaps, and KPI reporting capabilities.
• Integrate ServiceNow IRM with Active Directory, SharePoint, Microsoft Teams, CMDB, Service Mapping, SecOps, Vendor Portals, document repositories, and external enterprise systems.
• Support Agile delivery activities including sprint planning, backlog refinement, estimation, UAT support, deployment, and hypercare activities.
• Develop and maintain technical design documents, configuration documentation, knowledge transfer materials, and implementation guides.
• Ensure compliance with organizational governance standards, regulatory requirements, and ServiceNow development best practices.

Minimum Qualifications:

• Bachelor's Degree in Computer Science, Information Systems, Information Technology, Engineering, or a related.
• ServiceNow Certified System Administrator (CSA).
• ServiceNow Certified Application Developer (CAD).
• ServiceNow Certified Implementation Specialist – IRM (CIS-IRM) .
• Agile or Scrum certifications.
• +5 years of ServiceNow development experience.
• Hands‑on ServiceNow GRC implementation experience.
• Proven experience delivering at least 2 full-cycle ServiceNow IRM implementations.
• Experience implementing one or more of the following:
• Policy & Compliance Management
• Audit Management
• Business Continuity Management (BCM)
• Third-Party Risk Management (TPRM)

Job-Specific Skills:

• ServiceNow Integrated Risk Management (IRM).
• ServiceNow Governance, Risk & Compliance (GRC).
• Policy & Compliance Management.
• Audit Management.
• Business Continuity Management (BCM).
• Third-Party Risk Management (TPRM).
• Regulatory Change Management.
• Authority Documents & Regulatory Obligations.
• Risk Registers, KRIs, KCIs, and RCSA.
• Business Impact Analysis (BIA).
• Vendor Risk Assessment and Due Diligence.
• Control Testing and Compliance Assessments.
• ServiceNow Flow Designer.
• Glide API.
• Business Rules.
• Script Includes.
• Client Scripts.
• ACLs.
• REST/SOAP Integrations.
• Import Sets and Transform Maps.
• ServiceNow Reporting and Performance Analytics.
• Agile Delivery Methodologies.
• Source Control and Update Set Management.
• SAMA Regulatory Frameworks.
• NCA Essential Cybersecurity Controls (ECC).