Business Analyst (IT)

Northern Trust is undertaking an enterprise-wide modernization and consolidation of Governance, Risk, and Controls processes, data, and reporting. The Senior Business Analyst, GRC/IRM, will define and document business requirements for the ServiceNow IRM platform, lead discovery and process analysis, and serve as the functional liaison between business stakeholders and the technical team.

Responsibilities:

• Lead workshops and conduct interviews with business stakeholders to define, analyze, and validate GRC/IRM requirements
• Translate business needs into user stories, functional requirements, and process flow diagrams for implementation in ServiceNow IRM
• Develop risk-related artifacts such as risk registers, risk assessment methodologies, and control frameworks
• Conduct business process analysis to identify inefficiencies and make recommendations for improvement
• Collaborate with the technical team to ensure the configured solution aligns with the documented functional requirements
• Create and configure dashboards and reports to provide stakeholders with clear visibility into the organization's risk and compliance posture
• Develop test plans, assist with user acceptance testing (UAT), and ensure the solution meets acceptance criteria
• Provide ongoing support and clarification for implemented IRM solutions, acting as the subject matter expert
• Stay up-to-date with ServiceNow IRM product releases and evolving GRC industry trends

Requirements:

• • 5+ years of experience working with ServiceNow IRM, with a deep focus on GRC processes and modules
• • 10+ years of professional experience in risk management, GRC, or a related field, demonstrating an in-depth understanding of enterprise risk, and controls processes
• • Proven track record of success in gathering and translating complex business requirements into clear, functional specifications for large-scale ServiceNow IRM implementations
• • Expertise in core IRM capabilities such as Risk Identification, Risk and Control Self-Assessments (RCSA), Issue Management, Incident Management, Loss Events, and Controls Testing
• • Deep functional understanding of the ServiceNow IRM suite and its capabilities, including Policy and Compliance, Risk Management, and Audit Management
• • In-depth knowledge of GRC and risk management frameworks and best practices
• • Strong communication, presentation, and facilitation skills, with the ability to effectively bridge the gap between technical and non-technical stakeholders
• • Proven ability to lead workshops, gather requirements, and present complex information to all levels of the organization
• • Bachelor's degree in a relevant field, or equivalent professional experience
• • Experience with Agile or other iterative development methodologies
• • Experience with other risk management software or enterprise risk processes