ServiceNow GRC & SecOps Implementation

Engagement: ServiceNow GRC & SecOps Implementation

Modules in Scope: IRM (Policy, Compliance, Risk Management, TPRM), BCM, SecOps (SIR, VR, TI)
Regulatory Scope: SAMA Banking Frameworks ITGF/CFF/CSF etc, NCA ECC, PCI-DSS Level 3, ISO 22301
Project Location: Riyadh, Kingdom of Saudi Arabia
Duration: 6 months

Resource Requirement:

• Number of Resources: 2 (Two) ServiceNow Developers
• Seniority Level: Mid to Senior (minimum 3 years ServiceNow GRC implementation experience)

Mandatory Technical Competencies (both resources):

• ServiceNow IRM – Integrated Risk Management (Policy Management, Compliance, Risk Assessment, TPRM)
• ServiceNow SecOps- Security Incident Response (SIR), Vulnerability Response (VR), Threat Intelligence (TI)
• ServiceNow BCM – Business Continuity Management (BIA, BCM workflows, Crisis Management)
• ServiceNow TPRM- Third-Party Risk Management (vendor lifecycle, due diligence, tiering model)
• ServiceNow platform fundamentals- update sets, scripting, integrations, RBAC configuration

Desirable Competencies:

• ServiceNow Certified Implementation Specialist (CIS) – GRC or SecOps
• Integration experience with Qualys, Splunk, IBM QRadar
• Experience in Saudi Arabian regulated financial institutions (banking, fintech)
• Familiarity with SAMA, NCA ECC and ISO 22301 regulatory frameworks
• Arabic language skills (desirable, not mandatory)

zN8jS9iOHr