Application Developer

Desired Competencies (Technical / Behavioral Competency)

Must-Have

Configure and implement ServiceNow GRC / IRM applications : Policy & Compliance, Risk, Audit Management, Vendor Risk.

Define and map Authority Documents, Citations, and Controls; establish continuous monitoring indicators.

Automate risk assessment questionnaires, policy exception workflows, and evidence collection using Flow Designer.

Develop custom risk and compliance dashboards, reports, and performance indicators.

Integrate GRC / IRM with vulnerability, security incident, and third‑party risk data sources via IntegrationHub or APIs.

Ensure data integrity and segregation of duties within GRC tables.

Collaborate with Security, Audit, and Business teams to translate requirements into platform configurations.

Produce and maintain solution design documents, test scripts, and user guides.

Good-to-Have

Knowledge of regulatory frameworks such as ISO 27001, NIST CSF, GDPR, SOX.

Experience with ServiceNow Operational Resilience or Continuous Authorization & Monitoring modules.

Exposure to SecOps Vulnerability Response or Security Incident Response.

Familiarity with Archer, MetricStream, or similar GRC tools.

Basic scripting in JavaScript, Python, or PowerShell.

Relevant certifications such as ITIL v4, CISA, CRISC, or CISSP.