Senior Business Analyst - Service

Now GRC/IRM – Enterprise Policy Governance (Banking Client) Duration: 12 Months Location: Toronto (Hybrid, 2x/week) Overview: Our banking client is implementing Service

Now Governance, Risk and Compliance/Integrated Risk Management (GRC/IRM) as an enterprise-wide platform for managing policies, procedures, risks, controls, issues, exceptions, and escalations.

The program will replace fragmented processes and repositories with a centralized solution that provides an enterprise view of policy obligations, control effectiveness, governance activities, compliance gaps, and remediation efforts.

We are seeking a highly experienced Service

Now GRC/IRM Business Analyst who has previously supported a large-scale policy and compliance implementation within a major bank or similarly regulated organization.

This individual will bridge enterprise risk and business stakeholders, Service

Now Professional Services, and internal development teams.

This is not a generalist BA or Service

Now developer role.

The successful candidate must understand enterprise policy governance and be able to translate complex business requirements into detailed functional and configuration specifications.

Responsibilities: Lead discovery and requirements workshops with Enterprise Risk, Compliance, Legal, Audit, Technology, policy owners, control owners, and business units.

Define the enterprise operating model for managing policies, procedures, risks, controls, issues, exceptions, and escalations within Service

Now.

Document current-state processes and design standardized future-state workflows.

Translate business and regulatory requirements into detailed functional requirements, user stories, process flows, decision tables, data mappings, and configuration specifications.

Define end-to-end policy lifecycles, including creation, review, approval, publication, attestation, renewal, exception management, escalation, and retirement.

Design governance and escalation workflows for overdue approvals,



policy breaches, control failures, exceptions, unresolved issues, and remediation activities.

Establish relationships between policies, regulatory obligations, enterprise risks, controls, issues, gaps, business entities, and remediation plans.

Support the implementation of risk identification, risk assessment, risk appetite, issue management, and policy compliance capabilities.

Identify required integrations and data flows between Service

Now and existing risk, compliance, policy, audit, and reporting systems.

Partner with Service

Now developers and configuration teams to ensure requirements are technically actionable and correctly implemented.

Evaluate out-of-the-box Service

Now capabilities against the bank's requirements and identify where configuration, integration, or process changes are required.

Challenge incomplete or overly customized requirements and recommend practical, scalable solutions.

Support backlog management, acceptance criteria, testing, defect resolution, implementation readiness, and business acceptance.

Advise program leadership on common implementation challenges, dependencies, governance decisions, and lessons learned from previous enterprise deployments.

Facilitate alignment across stakeholder groups with different policy, risk, control, and compliance responsibilities.

Must haves: 10+ years of business analysis, business systems analysis, GRC consulting, or related enterprise transformation experience.

Direct experience delivering at least one enterprise-scale Service

Now GRC/IRM implementation.

Demonstrated experience with Service

Now Policy and Compliance Management.





Solid understanding of enterprise policy governance, including ownership, approval, attestation, exception, escalation, review, and renewal processes.

Experience designing workflows connecting policies, procedures, risks, controls, issues, regulatory obligations, and remediation activities.

Strong knowledge of enterprise risk-management frameworks and risk-appetite lifecycles.

Experience translating stakeholder requirements into detailed Service

Now functional and configuration specifications.

Proven ability to facilitate senior-level workshops and advise stakeholders on future-state process design.

Experience operating between business stakeholders, Service

Now implementation partners, architects, developers, and platform teams.

Strong requirements-management capabilities, including process mapping, user stories, acceptance criteria, traceability, data mapping, and testing.

Experience working within a major bank, financial institution, or similarly complex regulated enterprise.

Excellent communication, facilitation, critical-thinking, and stakeholder-management skills.

Nice to have: Experience implementing Service

Now GRC/IRM within a Canadian or global bank.

Experience with additional Service

Now capabilities such as Risk Management, Issues Management, Audit Management, Regulatory Change Management, Operational Risk, or Third-Party Risk Management.

Knowledge of banking regulatory compliance and operational/non-financial risk.

Experience consolidating fragmented policy and GRC processes into a centralized enterprise platform.

Familiarity with integrations between Service

Now and other GRC, audit, regulatory, document-management, or reporting platforms.

Service

Now certifications related to GRC/IRM, Business Analysis, or platform implementation.

Previous experience working with Service

Now Professional Services or a major Service

Now implementation partner.

📌 Senior Business Analyst - ServiceNow GRC/IRM – Enterprise Policy Governance (Banking Client) (Toronto)
🏢 S.i. Systems
📍 Toronto