Risk Analyst (ServiceNow IRM/GRC) - Remote Role

Company Overview

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. NTT DATA's Client is currently seeking a Risk Analyst - ServiceNow IRM/GRC to join their team.

Position Summary

We are seeking an experienced Risk Analyst with strong hands-on expertise in ServiceNow Integrated Risk Management (IRM)/Governance, Risk and Compliance (GRC) to support the identification, documentation, assessment, tracking, and ongoing management of enterprise risks and issues. The ideal candidate will have demonstrated experience working directly within ServiceNow IRM/GRC, particularly creating, updating, and maintaining risks and issues in the ServiceNow Risk Register. This role requires the ability to engage with business and technology stakeholders, understand their concerns, and translate stakeholder input into clear, concise, actionable risk statements. The Risk Analyst should have a strong understanding of the complete risk management lifecycle, from initial risk identification and assessment through remediation, monitoring, and closure.

Key Responsibilities

ServiceNow IRM/GRC & Risk Register Management

• Work hands-on within ServiceNow IRM/GRC to manage enterprise risks and issues.
• Create, update, and maintain risk and issue records within the ServiceNow Risk Register.
• Ensure risks are accurately documented with appropriate descriptions, categories, ownership, impact, likelihood, ratings, remediation plans, and status.
• Maintain the accuracy, completeness, and quality of risk-register information.
• Track open risks, issues, remediation activities, action items, and due dates through closure.
• Perform regular reviews and updates to ensure risk records reflect the current risk posture.
• Support stakeholders in navigating ServiceNow IRM/GRC processes and requirements.

Risk Identification & Assessment

• Facilitate the intake and identification of new risks and issues from business and technology stakeholders.
• Analyze stakeholder input and translate complex or loosely defined concerns into clear, concise, and well-structured risk statements.
• Assess risks based on established likelihood, impact, severity, and risk-rating methodologies.
• Differentiate appropriately between risks, issues, findings, observations, and remediation actions.
• Assist risk owners in documenting risk impact, root cause, existing controls, mitigation strategies, and target remediation dates.
• Support both initial and periodic risk assessments.

Risk Lifecycle Management

• Manage and support risks throughout the complete lifecycle, including: Identification → Intake → Assessment → Documentation → Risk Rating → Ownership → Remediation/Mitigation → Monitoring → Closure
• Ensure appropriate risk owners and remediation owners are assigned.
• Follow up with stakeholders on outstanding remediation actions and overdue items.
• Review supporting evidence before recommending risks or issues for closure.
• Maintain appropriate documentation and audit trails throughout the lifecycle.
• Escalate aging, overdue, or high-severity risks and issues when necessary.

Stakeholder Collaboration & Reporting

• Partner with business, IT, cybersecurity, compliance, audit, and other risk stakeholders to gather information and maintain risk records.
• Facilitate discussions with stakeholders to clarify risk scenarios, business impact, controls, and remediation plans.
• Communicate risk information clearly to both technical and non-technical audiences.
• Support preparation of risk reports, dashboards, status updates, and management reporting.
• Identify data-quality gaps and work with risk owners to resolve incomplete or inconsistent information.

Required Qualifications

• 5–7 years of experience in Risk Management, IT Risk, Enterprise Risk Management, GRC, Cybersecurity Risk, Compliance, or a related discipline.
• 5+ years of strong hands-on experience with ServiceNow IRM/GRC is mandatory.
• 5+ years of demonstrated experience creating, updating, tracking, and maintaining risks and issues within a ServiceNow Risk Register.
• Strong understanding of the complete risk lifecycle, including:
  • Risk identification
  • Risk assessment
  • Risk documentation
  • Risk remediation/mitigation
  • Risk monitoring
  • Risk acceptance and closure
• Ability to convert stakeholder discussions and inputs into clear, concise, actionable risk statements.
• Experience documenting risk descriptions, impact, likelihood, risk ratings, ownership, mitigation plans, and remediation activities.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Strong attention to detail and ability to maintain high-quality risk data.
• Ability to work independently and contribute immediately with minimal ramp-up.

Preferred Qualifications

• Experience with ServiceNow IRM/GRC Risk Management and Issue Management modules.
• Experience supporting IT, cybersecurity, operational, third-party, or enterprise risk programs.
• Understanding of risk and control frameworks such as NIST, ISO 27001, COBIT, COSO, or similar frameworks.
• Experience with risk dashboards, reporting, metrics, KRIs, and remediation tracking.
• ServiceNow IRM/GRC certification or relevant risk management certification is preferred.

Key Skills

For candidate sourcing, I would treat these as the four primary must-haves:

• 5–7 years of relevant Risk/GRC experience.
• Recent hands-on ServiceNow IRM/GRC experience — not merely ServiceNow ITSM exposure.
• Actual experience creating and maintaining Risks/Issues in the ServiceNow Risk Register.
• Ability to write risk statements and independently manage the risk lifecycle from identification/assessment through remediation and closure.

About NTT DATA

NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future.

Compensation and Benefits

Where required by law, NTT DATA provides a reasonable range of compensation for specific roles. The starting hourly range for this remote role is ($45.00 - $50.00/Hour). This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on several factors, including the candidate's actual work location, relevant experience, technical skills, and other qualifications.

Equal Opportunity Employer

NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

Contact Information

NTT DATA endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at [Contact information for accommodation requests only]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.