ServiceNow GRC / IRM - 领解方案顾问
ServiceNow GRC / IRM – Lead Solution Advisor
职位标题：ServiceNow GRC / IRM 领导解决方案顾问经验：57年相关的 ServiceNow (GRC/IRM) 主要模块需要：IRM （综合风险管理）,SIR （安全事件响应）,VR （脆弱性响应）,TPRM （第三方风险管理）,BCM （业务连续性管理）证书 （必须）:ServiceNow CSA （认证系统管理员）责任 ·负责配置+开发 ServiceNow,有强大的了解安全平台，运营和例外处理。·定义 ServiceNow 实现解决方案架构 （数据/对象模型，工作流，访问控制）. · 将要求转化为史诗/用户故事，构建模拟和实践驱动交付。· 拥有端到端的使用情况交付：工作流配置，定制，测试支持以及更高环境部署。·进行代码审查并执行 ServiceNow 最佳做法。· 使用 API/网络服务/连接器建立/维护集成。· 启用/支持内部团队提供培训和复杂的配置指导。· 在需要时支持在该领域内的预售 /解决方案讨论。必须具备57年的服务技能。· 有强大的 IRM/GRC 交付接触经验。· 与：WorkSpace,UI Builder,Flow Designer /复杂的工作流程合作。· 强大的脚本/配置：商业规则，客户端脚本，UI 政策，UI 脚本，UI 操作，UI 页面，Script 包含，ACLs. · 集成：REST/SOAP/API 和连接器 （优先）. · 平台管理：部署，升级，故障解决。· 提供23+的终端到终端项目 (req → build → go-live). · 强有力的文档 +通信；能够与分布式团队合作。好运用 · SecOps / IRM 实现：风险，审计，政策，供应商风险，SIR,VR,TPRM. ·接触 ITAM / SAM / HAM / CMDB. · 证书：CAD, ?? 风险 & 合规，CIS / CISC 相关知识库工具。工作的内容包括网络战略与变革：治理，风险评估，合规性，第三方风险，安全姿势计划，网络转型，风险分析和报告。最初发布在喜马拉雅山
查看英文原文
Role Title: ServiceNow GRC / IRM – Lead Solution Advisor
Experience: 5–7 years relevant ServiceNow (GRC/IRM)
Primary Modules Needed: IRM (Integrated Risk Management), SIR (Security Incident Response), VR (Vulnerability Response), TPRM (Third Party Risk Management), BCM (Business Continuity Management)
Certifications (Must): ServiceNow CSA (Certified System Administrator)
Responsibilities
- Lead configuration + development on ServiceNow with strong understanding of platform security, operations, and exception handling.
- Define solution architecture for ServiceNow implementations (data/object model, workflows, access controls).
- Convert requirements into epics/user stories, build mock-ups, and drive delivery hands-on.
- Own end-to-end use case delivery: workflow configuration, customizations, testing support, and deployments to higher environments.
- Conduct code reviews and enforce ServiceNow best practices.
- Build/maintain integrations using APIs/web services/connectors.
- Enable/support internal teams with training and complex configuration guidance.
- Support pre-sales / solution discussions within the domain when needed.
Must-have skills
- 5–7 years ServiceNow experience with strong IRM/GRC delivery exposure.
- Hands-on with: Workspace, UI Builder, Flow Designer / complex workflows.
- Strong scripting/config: Business Rules, Client Scripts, UI Policies, UI Scripts, UI Actions, UI Pages, Script Includes, ACLs.
- Integrations: REST/SOAP/APIs and connectors (preferred).
- Platform management: deployments, upgrades, troubleshooting.
- Delivered 2–3+ end-to-end projects (req → build → go-live).
- Strong documentation + communication; able to work with distributed teams.
Good-to-have
- SecOps / IRM implementations: Risk, Audit, Policy, Vendor Risk, SIR, VR, TPRM.
- Exposure to ITAM / SAM / HAM / CMDB.
- Certifications: CAD, CIS – Risk & Compliance, CIS – SIR, CIS – TPRM, CIS – VR.
- Knowledge of GRC roadmap + tools like RSA Archer / MetricStream.
Team / domain context
The work sits within Cyber Strategy & Transformation: governance, risk assessments, compliance, third-party risk, security posture programs, cyber transformation, risk analytics & reporting.
Originally posted on Himalayas