ServiceNow Business Analyst

Job Description

Role Summary

The Senior Business Analyst, GRC / IRM, is a subject matter expert in risk management processes, responsible for defining and documenting business requirements for the ServiceNow IRM platform. This role involves leading discovery workshops, conducting process analysis, and acting as the functional owner of the solution to ensure it aligns with business goals and best practices. As a Senior Business Analyst, you will be a key liaison between business stakeholders and the technical team to ensure that the ServiceNow IRM solution effectively addresses strategic GRC objectives.

Requirements

Experience Level

• 5+ years of experience working with ServiceNow IRM, with a deep focus on GRC processes and modules.
• 10+ years of professional experience in risk management, GRC, or a related field, demonstrating an indepth understanding of enterprise risk, and controls processes.
• Proven track record of success in gathering and translating complex business requirements into clear, functional specifications for large-scale ServiceNow IRM implementations.
• Expertise in core IRM capabilities such as Risk Identification, Risk and Control SelfAssessments (RCSA), Issue Management, Incident Management, Loss Events, and Controls Testing.

Qualifications

Nice to Have

Requirements

Experience Level 5+ years of experience working with ServiceNow IRM, with a deep focus on GRC processes and modules. 10+ years of professional experience in risk management, GRC, or a related field, demonstrating an indepth understanding of enterprise risk, and controls processes. Proven track record of success in gathering and translating complex business requirements into clear, functional specifications for large-scale ServiceNow IRM implementations. Expertise in core IRM capabilities such as Risk Identification, Risk and Control SelfAssessments (RCSA), Issue Management, Incident Management, Loss Events, and Controls Testing. Qualifications Deep functional understanding of the ServiceNow IRM suite and its capabilities, including Policy and Compliance, Risk Management, and Audit Management. In-depth knowledge of GRC and risk management frameworks and best practices. Strong communication, presentation, and facilitation skills, with the ability to effectively bridge the gap between technical and nontechnical stakeholders. Proven ability to lead workshops, gather requirements, and present complex information to all levels of the organization. Bachelor degree in a relevant field, or equivalent professional experience. Nice to Have Experience with Agile or other iterative development methodologies. Experience with other risk management software or enterprise risk processes