What are the responsibilities and job description for the ServiceNow Technical Lead- IRM & GRC position at Fisher Investments?
Overview
It's an exciting time to join Fisher Investments; we're investing in the future of our firm's technology and information security. As our global footprint expands, so does the complexity of our regulatory and risk landscape. We are looking for an experienced ServiceNow Technical Lead to lead the digital transformation of our Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) capabilities.
The Opportunity:
The ServiceNow Technical Lead (GRC/IRM), in collaboration with the ServiceNow Architect, is the senior technical authority responsible for the architecture, delivery, and long-term health of our risk and compliance solutions. You will translate complex regulatory requirements and enterprise risk strategies into scalable, secure, and automated workflows. This is a hands-on leadership role that sits at the intersection of high-end engineering and corporate governance.
The Day-to-Day:
We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:
It's an exciting time to join Fisher Investments; we're investing in the future of our firm's technology and information security. As our global footprint expands, so does the complexity of our regulatory and risk landscape. We are looking for an experienced ServiceNow Technical Lead to lead the digital transformation of our Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) capabilities.
The Opportunity:
The ServiceNow Technical Lead (GRC/IRM), in collaboration with the ServiceNow Architect, is the senior technical authority responsible for the architecture, delivery, and long-term health of our risk and compliance solutions. You will translate complex regulatory requirements and enterprise risk strategies into scalable, secure, and automated workflows. This is a hands-on leadership role that sits at the intersection of high-end engineering and corporate governance.
The Day-to-Day:
- Lead the technical design and implementation of ServiceNow GRC/IRM modules, including Policy and Compliance, Risk Management, Audit Management, Vendor Risk Management (VRM), and Business Continuity Management (BCM)
- Build and oversee automated indicators, control testing workflows, and evidence collection processes to reduce manual intervention and improve audit readiness
- Define and enforce coding best practices specifically for IRM data models, ensuring solutions are upgrade-safe and aligned with the ServiceNow CSDM (Common Service Data Provider) framework
- Design secure integrations between the GRC suite and external data sources (e.g., Azure AD, BitSight, Security Operations, and Financial systems) to provide a real-time view of the firm's risk posture
- Mentor a team of developers in GRC-specific configurations, including Advanced Risk Assessments, PA (Performance Analytics) for risk dashboards, and UI Builder for executive reporting
- Be a bridge between Technology, Information Security, Legal, and Internal Audit to translate "legalese" and policy into functional technical requirements
- Manage technical debt within the GRC scope, driving proactive performance tuning and ensuring the platform scales with our international growth
- 7 years of experience in ServiceNow development and platform engineering
- 3 years of deep technical expertise specifically within the ServiceNow GRC/IRM ecosystem
- Lead technical teams through complex, multi-module implementations
- Advanced proficiency in ServiceNow scripting (JavaScript, Glide), Flow Designer, IntegrationHub, and the IRM/GRC Metadata structure
- Experience with risk frameworks (NIST, ISO, COBIT, or SOC2) and how they map to technical controls within ServiceNow
- Certifications: ServiceNow CSA and CAD required; CIS-Risk and Compliance or CIS-Vendor Risk Management is preferred
- Explain complex technical risk architectures to non-technical stakeholders (Audit, Legal, and Executive Leadership)
We work for a bigger purpose: bettering the investment universe. We take great pride in our inclusive culture, our learning and development framework customized for every employee, and our Great Place to Work Certification. It's the people that make the Fisher purpose possible, and we invest in them by offering exceptional benefits like:
- 100% paid medical, dental and vision premiums for you and your qualifying dependents
- A 50% 401(k) match, up to the IRS maximum
- 20 days of PTO, plus 10 paid holidays
- Family Support programs including 8 week Paid Primary Caregiver Leave, $10,000 fertility, family forming, and hormonal health assistance, and back-up child, adult, and elder care
- This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change.