ServiceNow GRC Analyst

We're looking for a hands-on ServiceNow GRC Analyst to join a growing Security organization and support the implementation of an established security control framework across SaaS applications. This is an execution-focused role, not a strategy or architecture position. The team has already identified the controls and aligned them to the appropriate framework. This role will focus on operationalizing those controls in ServiceNow, working closely with system owners and technical leads to document, validate, and track compliance"”while intentionally excluding physical security-related controls and documenting the rationale for exclusions. This is a fast-paced environment ("drinking from the firehose"), ideal for someone who can quickly get the lay of the land, follow defined processes step by step, and move work forward independently.Must Haves5-8 years of hands-on ServiceNow experienceStrong emphasis on manual, operational work (not a strategic or design-focused role)ServiceNow GRC module experienceAbility to work directly within the GRC module to track controls, assessments, and evidenceSecurity fundamentalsStrong enough security knowledge to implement an existing security plan, not create oneExperience working with SaaS applications Must understand how to scope and assess SaaS controlsAbility to execute against predefined controls Controls are already identified and aligned to a frameworkCandidate will perform first-pass assessments and follow documented stepsStrong communication and interpersonal skillsComfortable working with:System Owners (business-facing stakeholders)Technical Leads / DTE teams

Created: 2026-05-09