You desire impactful work.
You’reRGA ready
Under limited supervision, this roleacts asstrategic bridge between technical security controls and enterprise complianceand riskrequirementsas part of aServiceNow IRM/GRC implementationteamsupporting the Global Security Office (GSO)and Enterprise Risk initiatives;with primary accountability forautomating,designing, configuring, and sustaining scalable IRM capabilitieswhile adhering to security frameworkswithin the ServiceNow platform. The position requirespractical experience translating regulatory, risk, audit, and compliance requirements into productionready platform configurations, mappings, workflows, data models, and reportinganalytics, not just advisory guidance, including requirements validation against user stories, UAT coordination, agile testing support, and release readiness. The rolerequires astrong analytical and problemsolvingapproachto operationalize GRC lifecyclesincluding policy, compliance, risk, audit, and regulatory change managementand to clearly communicate complex IRM concepts and design decisions to both technical teams and business stakeholders, supported by stakeholder enablement through rolebased training, job aids, and awareness communications. Responsibilities include monitoring and evaluation of control, regulatory, and security processes to ensure assurance over global systems and data, leveraging advancedunderstanding ofServiceNow IRM/Audit functionality, CMDB and entity modeling fundamentals, and an indepth understanding of ServiceNow platform dependencies and integrations.
Principle Duties
Work with functional and technical requirements to design and implement within ServiceNow Enterprise IRM Application and automate where possible.
Support and maintain ongoing processes, for Enterprise IRM Application with scope, product, and operational changes/maintenance.
Capture, support, and validate requirements to technical developers and move along deployment lifecycle including user acceptance testing and agile testing- assuring alignment between stories and stakeholders and taking processes into features/requirements for implementations.
Understands dependencies as aligned to ServiceNow architectural requirements.
Collaborate with compliance, security and risk professionals on projects related to compliance with regards to Security Frameworks (NIST CSF/SOX/DORA) and other regulations.
Develop and administer just in time training and awareness campaigns for various IRM/GRC groups within the company. Provide process improvement recommendations to mitigate risk, meet business obligations, and regulatory requirements.
Facilitates incoming audits and assessments, coordinates discussions with appropriate owners and business stakeholders, and follows up on any remediation activities identified to meet associated due dates to ensure timely completion.
Participates in the development of policies, standards, controls, procedures, and security and privacy audits and assessments.
The scope of routine activities and tasks in this role will be in support of one or more functional areas, the department or division.
Ability to structure, scope, and compile data to support reporting.
Performs other duties as assigned.
Education
Work Experience, Skills, and Abilities
4+ years' relevant experience in IT security, privacy, audit, controls and regulatory compliance, or related experience. - Required
Deep understanding of ServiceNow platform and its capabilities, dependencies with proficiency in ServiceNow administration and development and architectural requirements with experience in Version(s) after Yokohama - Required
ServiceNow GRC framework and process administration (Regulatory Change Management a plus) - Required
General knowledge of business and technology operations; ability to work well within a team setting and maintain a high level of confidentiality - Required
Intermediate knowledge of global standards and regulations regarding security, privacy, and fraud. - Required
Demonstrated ability to learn and stay current on data privacy, data security, and fraud threats and vulnerabilities. - Required
Intermediate organizational, planning and task management skills with high attention to detail; ability to adjust to changing priorities and work under tight timelines - Required
Intermediate level of investigative, analytical and problem-solving skills; ability to set goals, communicate expected outcomes and liase with individuals across a variety of functions and levels - Required
Excellent customer service skills; ability to balance multiple priorities, deadlines and deliverables while maintaining a positive attitude - Required
Intermediate oral and written communication skills; ability to convey information in a clear and concise manner and provide regular proactive updates to team members, key stakeholders, and mid-level management - Required
Quick to adapt to new methods; ability to be flexible when needed, take initiative and demonstrate accountability - Required
Insurance/Reinsurance industry experience or certifications - Preferred
Information security, privacy, compliance, risk or audit professional certifications, such as: SSCP, CIPP, CISA and Security+- Preferred
Intermediate understanding of domestic and global security & regulations - Preferred
Technical Skills
ServiceNow Expertise as GRC Admin or GRC/IRM implementation analyst OR ServiceNow University GRC: Integrated Risk Management (IRM) Implementer - Required
Strong understanding of GRC Lifecycles management (Policy, Controls, Audit, Risk, Regulatory Change Management, Advance Risk and Advance Audit)- Required
Strong understanding of Reporting, Dashboards, and workspace within ServiceNow- Required
Understanding of Regulatory tool integrations with ServiceNow
Strong understanding of Entities/CMDB within ServiceNow- Required
Microsoft Office application experience (Excel, Word, Visio, Teams, SharePoint)- Required
Familiarity with IT and security systems- Required
Knowledge of applicable regulations such as Sarbanes-Oxley, DORA, NY DFS, GLBA, GDPR etc.- Required
IT Control Frameworks including NIST CSF/P, NIST AI, COBIT, ITIL, ISO 27001/27002, CIS, etc. - Preferred
Knowledge of risk assessment methods - Preferred
Information security, privacy, compliance, risk or audit professional certifications, such as: SSCP and Security+ - Preferred
Experience reviewing SOC1 and SOC2 attestations - Preferred
Project management skills/experience - Preferred
Power-BI Experience for reporting, queries and creating dashboards - Preferred
#LI-CW1
#LI-Remote
Compensation Range:
$89,310.00 - $134,870.00 Annual
Base pay varies depending on job-related knowledge, skills, experience and market location. In addition, RGA provides an annual bonus plan that includes all roles and some positions are eligible for participation in our long-term equity incentive plan. RGA also maintains a full range of health, retirement, and other employee benefits.
