ServiceNow Developer – GRC

Job description

Key Responsibilities

Platform & TPRM Ownership: Serve as the technical SME for the ServiceNow TPRM/VRM application, driving long-term platform health, scalability, and alignment with business risk requirements.

Module Enablement & Architecture

Lead the technical design, configuration, and enablement of the DDR (Due Diligence Request) module and integrate it into existing enterprise workflows.

Profile Management

Architect and configure robust Third-Party Profiles, Vendor Hierarchies, and Risk Assessments to accurately capture, score, and monitor vendor data.

External Portal Development

Develop, enhance, and maintain the Third-Party Risk Portal using Service Portal technologies, ensuring a secure, modern, and intuitive interface for external vendors.

Platform Automation & Scripting

Design and implement complex automated processes using Flow Designer. Write highly efficient server-side and client-side logic using Business Rules, Script Includes, Client Scripts, and Script Actions.

Event Management

Configure and trigger Script Actions and platform Events to drive background processing and complex platform integrations.

Targeted Communications

Design and configure complex, condition-driven system Notifications tailored to specific internal compliance teams and external stakeholders.

Security & Access Control

Implement strict data governance by designing, troubleshooting, and maintaining complex Access Control Lists (ACLs) across affected tables, ensuring absolute data segregation for external users.

Mentorship & Best Practices

Promote ServiceNow development best practices, conduct code reviews, and help guide junior administrators or analysts.

Required Qualifications

Experience: A minimum of 5 years of proven, hands-on experience as a ServiceNow Developer, with a strong background in platform configuration, architecture, and custom application development.

GRC/TPRM Expertise

Direct, hands-on experience implementing and maintaining ServiceNow Vendor Risk Management (VRM) or Third-Party Risk Management (TPRM).

Certifications

Active ServiceNow Certified System Administrator (CSA) certification is required.

Technical Expertise

Deep understanding of ServiceNow security models, specifically architecting and troubleshooting complex ACLs and Data Policies (a must-have). Advanced proficiency in building enterprise-grade automated processes in Flow Designer and Integration Hub. Strong JavaScript capabilities, specifically with Script Includes, Business Rules, Script Actions, and the Event Registry. Experience configuring Service Portal pages, widgets, and user criteria for external users.

Preferred Qualifications

ServiceNow Certified Application Developer (CAD) certification. ServiceNow Certified Implementation Specialist – Vendor Risk Management (CIS-VRM). Experience with third-party data integrations (e.g., BitSight, RiskRecon, EcoVadis) via REST APIs.