Req ID: 394788
NTT DATA's Client is currently seeking a Risk Analyst - ServiceNow IRM/GRC to join their team.
Job Description:
Job Title: Risk Analyst - ServiceNow IRM/GRC
Experience: 5-7 Years
Technology Focus: ServiceNow IRM / GRC
Domain: Enterprise Risk Management / Governance, Risk & Compliance
Position Summary
We are seeking an experienced Risk Analyst with strong hands-on expertise in ServiceNow Integrated Risk Management (IRM)/Governance, Risk and Compliance (GRC) to support the identification, documentation, assessment, tracking, and ongoing management of enterprise risks and issues.
The ideal candidate will have demonstrated experience working directly within ServiceNow IRM/GRC, particularly creating, updating, and maintaining risks and issues in the ServiceNow Risk Register. This role requires the ability to engage with business and technology stakeholders, understand their concerns, and translate stakeholder input into clear, concise, actionable risk statements.
The Risk Analyst should have a strong understanding of the complete risk management lifecycle, from initial risk identification and assessment through remediation, monitoring, and closure.
Key Responsibilities
ServiceNow IRM/GRC & Risk Register Management
Work hands-on within ServiceNow IRM/GRC to manage enterprise risks and issues.
Create, update, and maintain risk and issue records within the ServiceNow Risk Register.
Ensure risks are accurately documented with appropriate descriptions, categories, ownership, impact, likelihood, ratings, remediation plans, and status.
Maintain the accuracy, completeness, and quality of risk-register information.
Track open risks, issues, remediation activities, action items, and due dates through closure.
Perform regular reviews and updates to ensure risk records reflect the current risk posture.
Support stakeholders in navigating ServiceNow IRM/GRC processes and requirements.
Risk Identification & Assessment
Facilitate the intake and identification of new risks and issues from business and technology stakeholders.
Analyze stakeholder input and translate complex or loosely defined concerns into clear, concise, and well-structured risk statements.
Assess risks based on established likelihood, impact, severity, and risk-rating methodologies.
Differentiate appropriately between risks, issues, findings, observations, and remediation actions.
Assist risk owners in documenting risk impact, root cause, existing controls, mitigation strategies, and target remediation dates.
Support both initial and periodic risk assessments.
Risk Lifecycle Management
Manage and support risks throughout the complete lifecycle, including:
Identification 12 Intake 12 Assessment 12 Documentation 12 Risk Rating 12 Ownership 12 Remediation/Mitigation 12 Monitoring 12 Closure
Ensure appropriate risk owners and remediation owners are assigned.
Follow up with stakeholders on outstanding remediation actions and overdue items.
Review supporting evidence before recommending risks or issues for closure.
Maintain appropriate documentation and audit trails throughout the lifecycle.
Escalate aging, overdue, or high-severity risks and issues when necessary.
Stakeholder Collaboration & Reporting
Partner with business, IT, cybersecurity, compliance, audit, and other risk stakeholders to gather information and maintain risk records.
Facilitate discussions with stakeholders to clarify risk scenarios, business impact, controls, and remediation plans.
Communicate risk information clearly to both technical and non-technical audiences.
Support preparation of risk reports, dashboards, status updates, and management reporting.
Identify data-quality gaps and work with risk owners to resolve incomplete or inconsistent information.
Required Qualifications
5-7 years of experience in Risk Management, IT Risk, Enterprise Risk Management, GRC, Cybersecurity Risk, Compliance, or a related discipline.
5+ years of strong hands-on experience with ServiceNow IRM/GRC is mandatory.
5+ years of demonstrated experience creating, updating, tracking, and maintaining risks and issues within a ServiceNow Risk Register.
Strong understanding of the complete risk lifecycle, including:
Risk identification
Risk assessment
Risk documentation
Risk remediation/mitigation
Risk monitoring
Risk acceptance and closure
Ability to convert stakeholder discussions and inputs into clear, concise, actionable risk statements.
Experience documenting risk descriptions, impact, likelihood, risk ratings, ownership, mitigation plans, and remediation activities.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Strong attention to detail and ability to maintain high-quality risk data.
Ability to work independently and contribute immediately with minimal ramp-up.
Preferred Qualifications
Experience with ServiceNow IRM/GRC Risk Management and Issue Management modules.
Experience supporting IT, cybersecurity, operational, third-party, or enterprise risk programs.
Understanding of risk and control frameworks such as NIST, ISO 27001, COBIT, COSO, or similar frameworks.
Experience with risk dashboards, reporting, metrics, KRIs, and remediation tracking.
ServiceNow IRM/GRC certification or relevant risk management certification is preferred.
Key Skills:
For candidate sourcing, I would treat these as the four primary must-haves:
5-7 years of relevant Risk/GRC experience.
Recent hands-on ServiceNow IRM/GRC experience - not merely ServiceNow ITSM exposure.
Actual experience creating and maintaining Risks/Issues in the ServiceNow Risk Register.
Ability to write risk statements and independently manage the risk lifecycle from identification/assessment through remediation and closure.
Where required by law, NTT DATA provides a reasonable range of compensation for specific roles. The starting hourly range for this remote role is ($45.00 - $50.00/Hour). This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on several factors, including the candidate's actual work location, relevant experience, technical skills, and other qualifications.
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.
#LI-NorthAmerica
