RedCloud Consulting is a business and IT consulting company with local Puget Sound Enterprise and Mid-sized clients. RedCloud seeks a ServiceNow GRC Business Analyst to support immediate client operations. Seattle Business Magazine has recognized us, ranked #1 on their "Best Companies to Work for in Washington" for Mid-Sized Businesses list, awarded #1 Fastest Growing Company in Washington by Puget Sound Business Journal, and named on the Inc. 500/5000 list.
Overview:
We are looking for a skilled and driven ServiceNow GRC Business Analyst to support and enhance our Governance, Risk, and Compliance (GRC) capabilities. This role focuses on designing, configuring, and optimizing workflows for Risk and Control Management, Policy Exceptions, and Issue Management while ensuring alignment with agile sprint deliverables. The ideal candidate will also have experience implementing control frameworks in ServiceNow Compliance, enabling the organization to meet key regulatory requirements.
Responsibilities include but are not limited to:
• Collaborate with stakeholders to gather and document requirements for workflows related to:
Risk and Control Management (escalations, workflows, reporting).
Policy Exceptions (approval paths, notifications, and escalations).
Issue Management (routing, triage workflows, and dashboards).
Configure and customize ServiceNow GRC modules to support the implementation and alignment of control frameworks (e.g., SOX, ISO 27001, NIST 800-53).
Manage Update Sets, ensuring accurate migration of configurations across Dev, Test, and Production environments.
Develop and maintain dashboards and reporting tools to provide actionable insights into compliance and risk metrics for stakeholders.
Support UAT processes by creating test scripts, facilitating testing sessions, and logging/resolving issues.
Design and implement group-based access controls and visibility rules for records in Risk, Policy Exceptions, and Issue Management modules.
Create and maintain training documentation and conduct user training sessions for:
Risk and Control Management workflows.
Policy Exceptions handling and reporting.
Issue Management routing and escalations.
Assist in aligning ServiceNow Compliance modules with organizational objectives by implementing control frameworks that meet regulatory requirements (e.g., GDPR, SOX).
Collaborate with cross-functional teams to ensure alignment between GRC modules and other ServiceNow capabilities, such as CMDB and SecOps.
Stay up to date on ServiceNow releases and recommend enhancements to improve platform capabilities.
Required Knowledge, Skills, and Abilities:
3-5 years of experience in Governance, Risk, and Compliance roles with hands-on ServiceNow GRC experience.
Proven ability to configure workflows for Risk and Control Management, Policy Exceptions, and Issue Management.
Experience implementing and managing control frameworks in ServiceNow Compliance (e.g., ISO 27001, NIST 800-53, SOX).
Strong ability to create and manage Update Sets for seamless migration across environments.
Expertise in group-based access controls and ServiceNow ACL configurations.
Excellent analytical skills to translate business needs into technical solutions.
Proficient in creating training materials, process diagrams, and test cases.
Familiarity with ServiceNow scripting (e.g., JavaScript) for advanced configurations (preferred but not required).
Strong understanding of ServiceNow GRC module dependencies with CMDB and other ServiceNow solutions.
Bachelor's degree in business, Information Technology, or a related field.
ServiceNow certifications (e.g., CIS-Risk and Compliance, IRM Fundamentals) are highly desirable.
Compensation range for position is $70-85/hour DOE.
Benefits and bonus information can be found at https://www.redcloudconsulting.com/careers
RedCloud requires employees have the legal ability to work in the United States during their employment period. During onboarding, proof of eligibility to work in the United States will be requested. RedCloud does not provide visa sponsorship.
About Us:
RedCloud is a boutique, business and technology consulting firm providing local companies with expert-level support for over two decades. Whether it’s to solve a specific business challenge or to provide additional support for an ambitious project, we can help bring even the most visionary endeavors to fruition.
Anchored by a foundation of "integrity-based consulting", the RedCloud team of subject matter experts collaborate closely with clients to develop and implement high-level solutions, bringing stability, growth, and innovation together for long-term success. We provide a broad array of business and technology consulting services through RedCloud’s core services: Empower Operations, Empower Sales and Marketing, Empower Customers, Empower Security and Privacy.
Visit http://www.redcloudconsulting.com/ for more info.
#LI-Hybrid