GRC Consultant

The GRC Tool Developer is responsible for designing, developing, customizing, and maintaining Governance, Risk & Compliance (GRC) platforms to support enterprise risk management, compliance tracking, audit management, and policy governance processes.

This role combines application development + risk & compliance domain knowledge.

Key Responsibilities

1 GRC Platform Development

• Develop and customize GRC tools such as:

1. RSA Archer Enterprise risk & compliance management

2.ServiceNow GRC Integrated risk and compliance within ServiceNow

3.MetricStream Enterprise-wide GRC platform

4.SAP GRC Governance and compliance within SAP environments

5.IBM OpenPages Risk and regulatory compliance solution

6.OneTrust Privacy, compliance & third-party risk

7.LogicGate Risk and compliance workflow automation

• Configure modules for Risk, Compliance, Audit, Policy, and Vendor Risk
• Design custom workflows, forms, and dashboards
• Develop calculated fields, reports, and data models

2 Integration & Automation

• Integrate GRC platform with:
• IAM tools
• SIEM tools
• ERP systems
• HR systems
• Develop APIs and automation scripts
• Implement automated risk scoring and compliance tracking

4 Risk & Compliance Alignment

• Map controls to frameworks (ISO 27001, NIST, SOX, GDPR, PCI-DSS)
• Support audit evidence automation
• Build risk registers and compliance dashboards

Technical Skills Required

Platform-Specific Skills (based on tool)

• Archer development (Data Feeds, Access Controls, Advanced Workflow)
• ServiceNow scripting (JavaScript, Glide API, Business Rules, Flow Designer)
• OpenPages configuration (Profiles, Workflows, Object Models)
• MetricStream module customization

Programming / Technical Skills

• JavaScript
• SQL / Database concepts
• REST/SOAP APIs
• Basic knowledge of Python (optional)
• Understanding of ITSM & ITIL processes