GRC Consultant

The GRC Tool Developer is responsible for designing, developing, customizing, and maintaining Governance, Risk & Compliance (GRC) platforms to support enterprise risk management, compliance tracking, audit management, and policy governance processes.

This role combines application development + risk & compliance domain knowledge.

Key Responsibilities

GRC Platform Development

- Develop and customize GRC tools such as:

1. RSA Archer – Enterprise risk & compliance management

2.ServiceNow GRC – Integrated risk and compliance within ServiceNow

3.MetricStream – Enterprise-wide GRC platform

4.SAP GRC – Governance and compliance within SAP environments

5.IBM OpenPages – Risk and regulatory compliance solution

6.OneTrust – Privacy, compliance & third-party risk

7.LogicGate – Risk and compliance workflow automation

- Configure modules for Risk, Compliance, Audit, Policy, and Vendor Risk - Design custom workflows, forms, and dashboards - Develop calculated fields, reports, and data models

Integration & Automation

- Integrate GRC platform with: - IAM tools - SIEM tools - ERP systems - HR systems - Develop APIs and automation scripts - Implement automated risk scoring and compliance tracking

Risk & Compliance Alignment

- Map controls to frameworks (ISO 27001, NIST, SOX, GDPR, PCI-DSS) - Support audit evidence automation - Build risk registers and compliance dashboards

Technical Skills Required

Platform-Specific Skills (based on tool)

- Archer development (Data Feeds, Access Controls, Advanced Workflow) - ServiceNow scripting (JavaScript, Glide API, Business Rules, Flow Designer) - OpenPages configuration (Profiles, Workflows, Object Models) - MetricStream module customization

Programming / Technical Skills

- JavaScript - SQL / Database concepts - REST/SOAP APIs - Basic knowledge of Python (optional) - Understanding of ITSM & ITIL processes