ServiceNow GRC Consultant

JOB DESCRIPTION

We are looking for a highly skilled ServiceNow Consultant with hands-on experience in ServiceNow GRC to join our cybersecurity team. This role combines business analysis, development, and functional consulting, requiring a solid grasp of Governance, Risk, and Compliance principles and the ability to translate business needs into scalable technical solutions.

Key Responsibilities:

• Act as a Business Analyst and Developer for ServiceNow GRC implementations, upgrades, and customizations.
• Gather, analyze, and document business and technical requirements from stakeholders.
• Design and develop workflows, integrations, and dashboards within ServiceNow GRC.
• Provide advisory on GRC frameworks (ISO 27001, NIST, COBIT, etc.) and industry best practices
• Support client readiness for compliance with local Saudi cyber regulations (e.g., NCA, SAMA, CITC).
• Conduct gap assessments and deliver tailored GRC roadmaps and remediation plans.

QUALIFICATIONS

• Proven hands-on experience in ServiceNow GRC modules (Policy & Compliance, Risk, Audit, Vendor Risk).
• Strong background in business analysis, requirements documentation, and stakeholder engagement
• Working knowledge of leading GRC platforms and tools in the market.
• Understanding of Governance, Risk, and Compliance concepts and frameworks.
• Familiarity with Saudi cybersecurity regulations is a strong plus.
• Excellent communication skills, both technical and non-technical.