ServiceNow GRC - Consultant
Enterprise Performance
Deloitte’s Enterprise Performance practice helps organizations improve business outcomes through platform-enabled transformation, technology modernization, and operational improvement. Within this space, our teams work across IT operations, service management, workflow automation, and enterprise platforms to deliver large-scale digital transformation programs. As a ServiceNow Senior Consultant, Technical Transformation, you will work with cross-functional teams to design, build, and enhance ServiceNow solutions that help clients streamline processes, improve service delivery, and create long-term business value.
Level: Consultant or equivalent
As a Consultant at Deloitte Consulting Services, you will design, develop, and deploy enterprise-scale software solutions, lead the creation of robust pipelines and manage code deployment across environments. You will collaborate with cross-functional, global teams to translate functional requirements into effective deliverables, independently guiding and mentoring junior team members. Your role spans the full project lifecycle, including estimation, planning, execution, and tracking key metrics for analysis, ensuring high-quality and timely delivery of solutions.
Work you'll do
We are seeking a skilled ServiceNow Governance, Risk, and Compliance (GRC) Consultant / Developer to design, implement, and support ServiceNow GRC / IRM solutions. The role requires a blend of functional risk and compliance knowledge plus hands-on platform expertise across Risk Management, Policy and Compliance, Audit Management, and related modules. The ideal candidate can translate business requirements into scalable workflows, controls, assessments, dashboards, and integrations that improve enterprise risk visibility and compliance performance.
Key Responsibilities
- Design, configure, and maintain ServiceNow GRC / IRM modules including Risk Management, Policy and Compliance, Audit Management, Vendor Risk Management, Third-Party Risk Management, and Business Continuity Management
- Gather business, risk, audit, and compliance requirements and convert them into solution designs, workflows, controls, and data models
- Configure risk assessments, scoring models, control frameworks, policy attestations, issue management, and remediation workflows
- Develop and customize ServiceNow applications using JavaScript, Glide API, Business Rules, Client Scripts, UI Policies, Script Includes, Flow Designer, and Studio
- Build reports, dashboards, and analytics for compliance status, open issues, control effectiveness, audit findings, and enterprise risk posture
- Integrate ServiceNow GRC with enterprise systems using REST, SOAP, MID Server, or Integration Hub to support automated evidence collection and cross-platform workflows
- Collaborate with stakeholders across IT, security, audit, legal, compliance, and business functions to align risk and compliance processes
- Support testing, UAT, release planning, defect resolution, documentation, and post-production support
- Recommend process improvements using current IRM trends such as continuous compliance monitoring, smart automation, and AI-enabled workflows
Required Qualifications
- 3-6 years Hands-on experience with the ServiceNow platform, including configuration and administration of GRC / IRM modules
- Strong understanding of governance, risk, and compliance principles, enterprise risk management, and control frameworks
- Proficiency in JavaScript and ServiceNow scripting concepts including Glide, Business Rules, and Flow Designer
- Experience with integration methods such as REST, SOAP, MID Server, and Integration Hub
- Familiarity with compliance and security frameworks such as SOX, ISO 27001, NIST, PCI-DSS, GDPR, HIPAA, or FedRAMP
- Strong analytical, problem-solving, communication, and stakeholder management skills
Preferred Qualifications
- ServiceNow Certified System Administrator (CSA)
- ServiceNow Certified Implementation Specialist – Risk and Compliance (CIS-RC)
- ServiceNow Certified Application Developer (CAD)
- Experience with Vendor Risk Management or Third-Party Risk Management implementations
Preferred Skills
- Risk assessment design
- Policy and control mapping
- Audit lifecycle support
- Workflow automation
- Dashboard and KPI development
- Stakeholder workshops
- Integration troubleshooting
- Documentation and training
Location: Bengaluru/Hyderabad/Pune/Chennai
Shift Timings: 24x7 including night shift as per business requirements