ServiceNow Technical Consultant IRMGRC

ServiceNow Technical Consultant (IRM/GRC) Costa Rica- Remote Job Summary : We are looking for a Contract IRM Automation Engineer to support the DT GRC Continuous Control Monitoring (CCM) program .This role is a hands-on technical position focused on automating control testing and evidence collection across GRC frameworks (SOX, NIST, CMMC).You will partner with the IRM engineering team to build and configure automated control indicators — translating control requirements into ServiceNow automation logic that continuously monitors control effectiveness and produces audit-ready evidence.
What you'll do in this role: Configure pre-built ServiceNow IRM connectors to downstream systems (identity platforms, data warehouses, PAM tools, etc.)Build integrations and API calls to pull control evidence from source systemsManage service account credentials and API access for downstream system connectionsWrite ServiceNow native scripting logic for control indicators — translating control requirements into deterministic pass/fail rulesValidate that automated indicators produce correct, audit-compliant outputWork with control owners and GRC stakeholders to understand evidence requirements and validate automation accuracyPartner with engineering team to troubleshoot integration issues and optimize indicator logicDocument integration patterns and automation logic for knowledge transferTroubleshoot false positive issues or indicator breakdownsPerform enhancements to existing automation on an as-needed basis
Skills: What you need to be successful in this role: 8+ years of hands-on ServiceNow platform experience, with demonstrated expertise in indicator scripting and/or automation logicStrong understanding of GRC concepts — specifically, how controls are defined, tested, and evidenced for compliance frameworks (SOX, internal audit, etc.)Experience configuring ServiceNow connectors and building integrations with external systems via APIsComfort managing API credentials, service accounts, and integration securityAbility to translate a control requirement (e.g. "MFA must be enforced") into a machine-evaluable automation ruleExperience working with downstream system admins and API documentation to identify integration pointsSelf-directed learner who can ramp quickly in a matrixed environment with minimal handholdingComfortable troubleshooting integration and scripting issues with engineering support
Nice to have: Prior experience in GRC, IRM, Risk Management, or compliance domainsFamiliarity with identity and access management systems (SailPoint, Zscaler, etc.), data platforms (Snowflake, MDM), or privileged access management toolsExperience with ServiceNow Performance Analytics or control monitoring workflowsExposure to audit standards and control frameworks ServiceNow GRC.