IRM Business Process Consultant

Job Description

The Business Process Consultant IRM is a trusted advisor who partners with customers to analyze design and optimize risk compliance resilience and audit processes through the ServiceNow IRM platform. This role bridges business risk objectives and technology solutions helping organizations mature their GRC operating model while delivering measurable business outcomes.

The BPC IRM leads discovery activities facilitates workshops gathers requirements and provides process expertise across Risk Management Policy & Compliance BCM/TPRM Audit and Privacy engagements. Working closely with customers architects technical consultants and project teams the BPC ensures solutions align with risk appetite regulatory requirements and organizational priorities.

What You Get To Do In This Role

• Lead customer discovery workshops to understand risk compliance resilience and audit challenges and objectives.
• Analyze current-state GRC processes and define future-state risk operating models.
• Gather document and prioritize business requirements across Risk Policy & Compliance TPRM BCM Audit and Privacy.
• Translate customer needs into solution requirements and user stories for IRM modules.
• Provide process advisory based on industry leading practices (NIST ISO 27001 COBIT ISF SOGP etc.) and ServiceNow IRM capabilities.
• Facilitate alignment between executive risk owners compliance/audit teams and technical delivery teams.
• Support solution design activities by ensuring risk and compliance requirements are clearly defined and understood.
• Drive change management and adoption conversations across GRC engagements.
• Identify opportunities for risk process standardization automation and control efficiency.
• Present recommendations and findings to risk compliance and executive stakeholders.

Key Responsibilities

• Conduct risk and compliance maturity assessments (e.g. aligned to NIST CSF ISO 27001 etc.).
• Document process flows operating models business requirements and functional specifications for Risk Policy & Compliance TPRM BCM Audit and Privacy.
• Facilitate stakeholder interviews and working sessions with risk owners compliance officers and auditors.
• Lead requirements validation and process design workshops for GRC use cases.
• Define business outcomes success metrics and value realization plans for IRM programs.
• Collaborate with Technical Consultants and Architects to ensure solution alignment.
• Support testing training and user adoption activities for risk and compliance users.
• Identify project risks dependencies and business impacts across IRM implementations.
• Provide guidance on governance organizational readiness and risk operating model design.
• Contribute to IRM practice assets methodologies and knowledge sharing.

Qualifications :

To be successful in this role you have:

Qualifications Required

• 4 years of experience in GRC consulting risk/compliance transformation audit or related fields.
• Experience leading workshops and managing customer-facing discussions with risk and compliance stakeholders.
• Strong business process analysis and requirements gathering skills applied to risk compliance or audit domains.
• Experience documenting business requirements process maps and functional designs.
• Strong facilitation and stakeholder management skills.
• Excellent written and verbal communication abilities.
• Professional English proficiency.

Preferred

• Experience with ServiceNow IRM or other GRC/risk SaaS platforms.
• Knowledge of risk and compliance frameworks (NIST CSF ISO 27001/27002 ISF SOGP COBIT DORA).
• Experience with operating model redesign and BCM/resilience programs.
• Working knowledge of Agile delivery methodologies.
• Spanish proficiency for LATAM-facing roles.

Success Profile 

• Independently leads customer workshops and discovery engagements across IRM domains.
• Acts as the primary risk/compliance process advisor for medium-to-large projects.
• Identifies opportunities to improve customer risk posture and business outcomes.
• Translates complex risk and compliance challenges into actionable requirements.
• Builds trusted relationships with risk compliance and audit stakeholders.
• Drives alignment between risk objectives and solution delivery teams.

Additional Information :

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible remote or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation national origin age disability gender identity  veteran status or any other category protected by addition all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. 

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process or are unable to use this online application and need an alternative method to apply please contact for assistance. 

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations including the U.S. Export Administration Regulations (EAR) ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities. 

From Fortune. 2026 Fortune Media IP Limited. All rights reserved. Used under license.

Remote Work :

Yes

Employment Type :

Full-time