- Gather business and system requirements from various stakeholders such as business process owners, business users and conduct business needs analyses with an understanding of the defined problems to be addressed to deliver suitable solutions.
- Prepare business requirement documentation, functional specifications, business process workflows, etc.
- Support implementation and ongoing maintenance of the GRC system.
- Assist in identifying and managing project risks and implications to the project and recommend mitigation measures.
- Point of contact for GRC system inquiries, issues, and enhancements, collaborating with internal stakeholders, and external vendors.
- Ensure critical issues or defects are prioritised, investigated, and followed up until closure.
- Assist end users to resolve escalated issues/defects within the GRC system.
- Coordinate all project work activities to ensure timely and effective execution.
- Handle project administration, including information dissemination, milestone tracking, and deliverable management, as well as coordination of meetings.
- Participate in testing of the solutions where relevant.
- Maintain prompt communication and timely reports to business stakeholders on project status and issues escalation. This includes the preparation of materials to facilitate communication and provision of updates.
- Document and maintain the IRM matters e.g., workflows, knowledge base, budget, etc.
- Accountable and responsible for delivering on commitments.
- Perform other duties as needed to support the Team.
- Bachelor’s degree in computer science or STEM Majors (Science, Technology, Engineering and Math) with at least 2-3 years of working experience in IT, ServiceNow IRM, or Business Analysis.
- Hands on experience or played a supporting role in ServiceNow IRM implementation and demonstrating relevant proficiency would be an advantage.
- Some experience in governance, risk management (IT and operational risks) and/or compliance.
- Some knowledge on well-recognized frameworks & standards such as ISO31000 and COSO ERM.