KellyMitchell Group ยท 1 day ago
Senior Business Analyst, ServiceNow GRC/IRM
KellyMitchell Group is seeking a Senior Business Analyst, ServiceNow GRC/IRM to join their team. The role involves leading workshops to define GRC/IRM requirements and translating business needs into functional specifications for implementation in ServiceNow.
Human ResourcesInformation TechnologyStaffing Agency
Responsibilities
Lead workshops and conduct interviews with business stakeholders to define, analyze, and validate GRC/IRM requirements
Translate business needs into user stories, functional requirements, and process flow diagrams for implementation in ServiceNow IRM
Develop risk-related artifacts such as risk registers, risk assessment methodologies, and control frameworks
Conduct business process analysis to identify inefficiencies and make recommendations for improvement
Collaborate with the technical team to ensure the configured solution aligns with the documented functional requirements
Create and configure dashboards and reports to provide stakeholders with clear visibility into the organization's risk and compliance posture
Develop test plans, assist with user acceptance testing (UAT), and ensure the solution meets acceptance criteria
Provide ongoing support and clarification for implemented IRM solutions, acting as the subject matter expert
Stay up-to-date with ServiceNow IRM product releases and evolving GRC industry trends
Qualification
Required
Bachelor's degree in a relevant field, or equivalent professional experience
10+ years of professional experience in risk management, GRC, or a related field, demonstrating an in-depth understanding of enterprise risk, and controls processes
5+ years of experience working with ServiceNow IRM, with a deep focus on GRC processes and modules
Proven track record of success in gathering and translating complex business requirements into clear, functional specifications for large-scale ServiceNow IRM implementations
Expertise in core IRM capabilities such as Risk Identification, Risk and Control Self-Assessments (RCSA), Issue Management, Incident Management, Loss Events, and Controls Testing
Deep functional understanding of the ServiceNow IRM suite and its capabilities, including Policy and Compliance, Risk Management, and Audit Management
In-depth knowledge of GRC and risk management frameworks and best practices
Strong communication, presentation, and facilitation skills, with the ability to effectively bridge the gap between technical and non-technical stakeholders
Proven ability to lead workshops, gather requirements, and present complex information to all levels of the organization
Benefits
Medical, Dental, & Vision Insurance Plans
Employee-Owned Profit Sharing (ESOP)
401K offered