Senior ServiceNow IRM Analyst: Lead Risk & Compliance

Northern Trust Corp; Chicago (IL); Hybrid; USD 96,000 - 162,000; Full time

Benefits offered by this job

401k and pension

Job summary

Northern Trust Corp is seeking a Senior ServiceNow IRM Business Analyst to serve as the functional lead for one or more GRC capabilities and a subject-matter expert in risk and control lifecycles.

This role requires discovery, process analysis, requirement definition, solution validation, and adoption activities to ensure alignment with enterprise standards and regulatory expectations. Collaboration with Risk, Compliance, Audit and Technology teams is essential.

Qualifications

• Lead functional expertise across the ServiceNow IRM suite and the governance, risk, compliance, and audit ecosystem.
• Translate regulatory needs into unambiguous functional requirements, user stories, acceptance criteria, and traceability artifacts.
• Challenge unclear requests, connect requirements across disciplines, and guide stakeholders toward standardized enterprise processes.

Responsibilities

• GRC and IRM functional leadership across the end-to-end lifecycle, including taxonomy, data, controls, testing, remediation, and reporting.
• Plan and facilitate workshops; document current and target state processes, data needs and rules.
• Partner with product, architecture, engineering, data and test leads to shape scalable ServiceNow IRM solutions.
• Define end-to-end business scenarios and acceptance criteria; coordinate validation and adoption activities.

Skills

GRC Leadership

IRM Functional Expertise

Requirements Discovery

Stakeholder Collaboration

Tools

ServiceNow IRM

Job description

Northern Trust Corp is seeking a Senior ServiceNow IRM Business Analyst to serve as the functional lead for one or more GRC capabilities and a subject-matter expert in risk and control lifecycles.

This role requires discovery, process analysis, requirement definition, solution validation, and adoption activities to ensure alignment with enterprise standards and regulatory expectations. Collaboration with Risk, Compliance, Audit and Technology teams is essential.