> Markdown version of [/jobs/ext/2405327-servicenow-grc-consultant](https://www.wearedevelopers.com/jobs/ext/2405327-servicenow-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ServiceNow GRC Consultant - **Company:** DivIHN Integration - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Temporary to permanent - **Skills:** JavaScript (Programming Language), Configuration Management Databases, Cyber Security, Information Systems, System Configuration, PCI Data Security Standards, SOAPAPI, Information Technology, CIS Benchmarks, Servicenow - **Published:** August 12, 2026 - **Apply:** https://www.dice.com/job-detail/00951bea-7f3c-488e-96ca-d83480f14d8c ## About the Role * Bachelor's degree in computer science, Information Systems, or a related field (or equivalent experi-ence). * 7+ years of ServiceNow experience. * 3+ years implementing ServiceNow GRC / IRM. * A proven ground-up GRC build, start to finish. * Hands-on configuration of Risk Management. * Hands-on configuration of Policy and Compliance. * Hands-on configuration of Audit Management. * Strong JavaScript development. * Hands-on work with Flow Designer, Business Rules, Script Includes, ACLs, and UI Policies. * Integration through REST and SOAP APIs. * Strong requirements gathering and documentation. * Understanding of Integration Hub, Integration with ITSM, CMDB, Security Operations, and Vulnera-bility Response. * Working knowledge of NIST, CIS Controls, ISO 27001, HIPAA, CJIS, PCI-DSS, or SOX. * Proven knowledge transfer and training. * Strong communication and facilitation skills with ex-perience delivering end-user training, mentoring administrators, and conducting effective knowledge transfer during enterprise platform implementations. 5. Preferred Qualifications * CIS-RC certification (Certified Implementation Specialist, Risk and Compliance). * CSA certification (Certified System Administrator). * GRC build experience in government or public sector. * Configuration of Vendor Risk Management. * Configuration of Business Continuity Management. * IntegrationHub experience. ## Description * We seek a senior consultant to lead a full ServiceNow GRC build for a state agency. * The agency owns the GRC (IRM) module suite. * It has not turned the modules on or set them up. * This person starts at zero and takes the platform live. * The right hire has led this kind of build before, start to finish. 2. What Success Looks Like By the close of the engagement, the consultant will have delivered the items below. * A live GRC platform in production. * Configured Risk Management, Policy and Compliance, and Audit Management modules. * A working risk register, control library, and policy repository. * Tested workflows, dashboards, and reports. * GRC tied into the agency's current ServiceNow apps. * Complete technical and functional documentation. * Trained administrators and business users. 3. Core Responsibilities The consultant owns the work below across each phase. Plan and design * Lead the build from planning through production. * Gather business and technical needs from agency stakeholders. * Turn those needs into a clear solution design. Configure and build * Configure Risk Management, Policy and Compliance, and Audit Management. * Configure Vendor Risk Management and Business Continuity Management where the agency needs them. * Build workflows, forms, approvals, notifications, dashboards, and reports. * Build risk registers, control libraries, compliance frameworks, and policy repositories. * Write custom logic with JavaScript, Flow Designer, Business Rules, Script Includes, UI Policies, and In-tegrationHub when the work calls for it. Integrate * Connect GRC to current ServiceNow apps: ITSM, CMDB, Security Operations, and Vulnerability Re-sponse. * Connect to third-party tools through REST and SOAP APIs. Test, deploy, and support * Run testing and guide user acceptance testing (UAT). * Deploy to production. * Support the agency after go-live. Document and train * Write technical and functional documents. * Run knowledge transfer sessions. * Train administrators and business users. * Lead knowledge transfer sessions and effectively train administrators, business users, and support staff to ensure the agency can independently administer and maintain the ServiceNow GRC platform after implementation. Collaborate * Work with business, security, compliance, audit, and infrastructure teams through each phase. ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)