ServiceNow Governance, Risk and Compliance (GRC) Team Lead

Career Area:

Technology, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other.  We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

ServiceNow Governance, Risk and Compliance (GRC) Team Lead

Role Definition:

The ServiceNow Governance, Risk and Compliance (GRC) Team Lead plays a critical role in the advancement and maturation of enterprise risk management, governance, and cybersecurity compliance programs. This position is designed for an experienced professional who possesses deep expertise in ServiceNow IRM modules. The architect will be responsible for designing, implementing, and optimizing ServiceNow solutions that support organizational risk, security, and compliance objectives. This role requires strategic thinking, firsthand technical skills, and the ability to effectively collaborate with business and IT stakeholders to align technology solutions with regulatory requirements, cybersecurity assessment types, and risk management best practices.

What You Will Do:

• Lead Architecture and Strategy: Define and drive the architectural vision and roadmap for ServiceNow IRM, ensuring alignment with the organization’s broader Cybersecurity, Governance, Risk, and Compliance strategy.

• Solution Design: Design and architect ServiceNow IRM solutions—including Policy & Compliance Management, Risk Management, Audit Management, Vendor Risk Management, and other related modules—to meet complex business requirements.

• Implementation Leadership: Oversee the implementation of ServiceNow IRM capabilities, ensuring high quality, scalability, and maintainability. Serve as the technical authority during project delivery, migration, and integration phases.

• Stakeholder Collaboration: Work closely with Cybersecurity, IT, Legal, Compliance, and business stakeholders to gather requirements, define solutions, and ensure alignment with organizational goals.

• Governance Frameworks: Translate regulatory requirements industry best practices—such as ISO 27001/2, NIST, SOC, PCI-DSS, ISA-62443, CIS, HIPAA, and GDPR—into ServiceNow IRM workflows and processes that drive compliance automation and reporting.

• Risk and Compliance Automation: Develop and optimize automated processes, reporting, and dashboards within ServiceNow to enable efficient tracking, escalation, and remediation of risks and compliance violations.

• Continuous Improvement: Analyze system performance, usage, and feedback to identify opportunities for optimization and enhancement. Implement updates and changes to maximize value, while minimizing customization and maintaining Out of the Box functionality.

• Technical Leadership and Mentorship: Guide, mentor, and develop junior architects, developers, and business analysts, fostering a culture of excellence and continuous learning.

• Change Management: Lead organizational change efforts related to GRC initiatives, educating stakeholders on new functionality and driving adoption of ServiceNow IRM solutions.

• Risk Reporting and Analytics: Architect advanced analytics and reporting capabilities to deliver actionable insights for executive leadership, risk committees, and audit teams.

• Integration Management: Design and oversee integrations between ServiceNow IRM and other enterprise applications, such Snowflake, vulnerability management, third-party risk, and identity management platforms.

• Documentation and Standards: Produce comprehensive solution documentation, architectural diagrams, standards, and best practice guides to support operational sustainability.

What You Have:

• Education: Bachelor’s or master’s degree in computer science, Information Security, Information Systems, or a related discipline.

• Progressive experience in designing and implementing GRC/IRM solutions, with at least 5 years in a senior or lead architect focused on ServiceNow IRM modules.

• Demonstrated proficiency in ServiceNow IRM, including advanced configuration, scripting, custom application development, and module integration.

• Thorough understanding of governance frameworks (e.g., ISO, NIST, COBIT), regulatory compliance standards, and risk management processes.

• Strong firsthand experience with JavaScript, REST/SOAP APIs, ServiceNow Flow De