> Markdown version of [/jobs/ext/1501884-senior-esm-consultant-servicenow-sme-grc-irm](https://www.wearedevelopers.com/jobs/ext/1501884-senior-esm-consultant-servicenow-sme-grc-irm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior ESM Consultant - ServiceNow SME - GRC & IRM

- **Company:** Capgemini
- **Location:** McLean, VA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $70,176.0 - $170,040.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Control Objectives for Information and Related Technology (COBIT), Cyber Security, Metadata, Performance Tuning, Azure Active Directory, Scripting, Technical Debt, Servicenow
- **Published:** July 30, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=da64336bc728da21

## About the Role

* 7+ years of experience in ServiceNow development and platform engineering
 * 3+ years of deep technical expertise specifically within the ServiceNow GRC/IRM ecosystem
 * Lead technical teams through complex, multi-module implementations
 * Advanced proficiency in ServiceNow scripting (JavaScript, Glide), Flow Designer, IntegrationHub, and the IRM/GRC Metadata structure
 * Experience with risk frameworks (NIST, ISO, COBIT, or SOC2) and how they map to technical controls within ServiceNow

## Description

* You will translate complex regulatory requirements and enterprise risk strategies into scalable, secure, and automated workflows
 * This is a hands-on leadership role that sits at the intersection of high-end engineering and corporate governance
 * Lead the technical design and implementation of ServiceNow GRC/IRM modules, including Policy and Compliance, Risk Management, Audit Management, Vendor Risk Management (VRM), and Business Continuity Management (BCM)
 * Build and oversee automated indicators, control testing workflows, and evidence collection processes to reduce manual intervention and improve audit readiness
 * Define and enforce coding best practices specifically for IRM data models, ensuring solutions are upgrade-safe and aligned with the ServiceNow CSDM (Common Service Data Provider) framework
 * Design secure integrations between the GRC suite and external data sources (e.g., Azure AD, BitSight, Security Operations, and Financial systems) to provide a real-time view of the firm's risk posture
 * Mentor a team of developers in GRC-specific configurations, including Advanced Risk Assessments, PA (Performance Analytics) for risk dashboards, and UI Builder for executive reporting
 * Be a bridge between Technology, Information Security, Legal, and Internal Audit to translate 'legalese' and policy into functional technical requirements
 * Manage technical debt within the GRC scope, driving proactive performance tuning and ensuring the platform scales with our international growth


## Related Videos

- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [A Data Mesh needs Open Metadata](https://www.wearedevelopers.com/videos/505-a-data-mesh-needs-open-metadata)
- [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment)
- [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Mastering Remote Work: Tips for Developers](https://www.wearedevelopers.com/magazine/558-mastering-remote-work-tips-for-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)