ServiceNow IRM Senior Analyst

Position Summary 

The Senior ServiceNow IRM Business Analyst is the functional lead for one or more GRC capabilities and a subject matter expert in the end-to-end risk and control lifecycle. This individual leads discovery, process analysis, requirement definition, solution validation, and adoption activities for ServiceNow IRM. The role ensures that business outcomes, regulatory expectations, enterprise taxonomies, data standards, and platform best practices are reflected in the delivered solution. 

This is not a generalist requirements role. The successful candidate should be able to challenge unclear requests, connect requirements across GRC disciplines, identify downstream impacts, and guide stakeholders toward consistent enterprise processes that favor sustainable, out-of-the-box platform capabilities over unnecessary customization. 

Key Responsibilities 

GRC and IRM Functional Leadership 

• Provide senior-level functional expertise across the ServiceNow IRM suite and the broader governance, risk, compliance, and audit ecosystem. 

• Connect requirements across the end-to-end lifecycle, including taxonomy and foundational data, identification and assessment, controls, testing and monitoring, issues and remediation, reporting, and assurance. 

• Advise stakeholders on fit-to-platform options, process standardization, reuse, and implications for adjacent capabilities. 

• Act as the functional owner for assigned capabilities from discovery through implementation, validation, deployment, and continuous improvement. 

Discovery, Process Analysis and Requirements 

• Plan and facilitate workshops with business, risk, compliance, audit, operations, data, and technology stakeholders. 

• Document current-state and target-state processes, business rules, decision points, roles, handoffs, data needs, controls, pain points, and expected outcomes. 

• Translate business and regulatory needs into unambiguous functional requirements, user stories, acceptance criteria, process flows, data definitions, and traceability artifacts. 

• Perform gap, impact, dependency, and root-cause analysis across processes, data, workflows, integrations, reporting, security roles, and operating-model responsibilities. 

• Maintain requirement quality throughout delivery, including versioning, approvals, traceability, and change control. 

Solution Definition and Delivery Partnership 

• Partner with Product Owners, architects, engineers, platform teams, data teams, and test leads to shape scalable ServiceNow IRM solutions. 

• Lead functional design reviews and showbacks, confirm that proposed configurations satisfy business intent, and document decisions and tradeoffs. 

• Support backlog refinement, prioritization, sprint planning, dependency management, release planning, and readiness activities. 

• Identify where requests conflict with enterprise standards, duplicate existing functionality, introduce control gaps, or create unsustainable customization. 

• Support production triage and enhancement analysis by distinguishing defects, data issues, training gaps, process gaps, and new requirements. 

Testing, Adoption and Operational Readiness 

• Define end-to-end business scenarios and acceptance criteria spanning multiple IRM capabilities and lines of defense. 

• Coordinate functional validation and user acceptance testing, including test data, expected outcomes, defect clarification, retesting, and business sign-off. 

• Ensure process documentation, role guidance, training inputs, communications, support procedures, and reporting needs are ready for release. 

• Partner with change and business teams to drive adoption, capture feedback, and prioritize improvements based on business value and control outcomes.