ServiceNow GRC Program Delivery Director

RSM • Nashville, TN

4d • $134,000 - $269,000

About The Position

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM. About us To address the most critical needs of our clients, RSM US LLP established the Cyber group, comprised of more than 300 professionals dedicated exclusively to serving the cybersecurity needs of our clients. This group includes experienced consultants located throughout the United States, United Kingdom, Canada, El Salvador, and India dedicated to helping clients with preventing, detecting, responding, and recovering to security threats that may affect their critical systems and data. We serve a diverse client base within a variety of industries, and we are relied upon to provide expertise across the full suite of security and privacy capabilities including managing the daily activities associated with our clients' security operations. The position As GRC Director, you will help architect RSM's GRC program and technology implementation products and oversee sales pursuits and program delivery for clients across a range of industries and geographic locations. The ideal candidate will have hands‑on experience implementing GRC modules—such as Policy Management, Risk Management, Compliance Management, Issue Management, and Third‑Party Risk Management—on leading GRC platforms including ServiceNow. Candidates should also have demonstrated expertise in defining and building a second line‑of‑defense operating structure, and integrating client systems and telemetry to deliver actionable risk and compliance insights. Experience with API‑led integration strategies and intelligent automation (AI/ML), and the ability to apply these capabilities in an operational environment, is highly preferred. A successful GRC Director will direct a geographically disbursed team of security personnel across our global footprint. You will move clients beyond manual compliance to a model of dynamic and predictive compliance and risk intelligence. This role ensures our clients operational foundational areas (unified controls taxonomies), effectively identify and mitigate risks, and integrate as well as automate control and risk evidence gathering and analysis across our service delivery.

Requirements

• 10+ years of experience in GRC roles, preferably in second-line or assurance functions
• Strong technical knowledge in GRC Tools: ServiceNow (preferred), Archer, AuditBoard, OneTrust and other leading tools
• In-depth knowledge of the regulations and standards such as ISO 27001, NIST 800 Series, PCI-DSS, GPDR, HIPPA, etc.
• Successful track record of building and growing a GRC Technology practice.
• Proven demonstration of the ability to manage a marketing campaign to launch a new or expanded services.
• Demonstrates comprehensive knowledge and a proven record of success with identifying and obtaining new GRC service opportunities and taking the opportunities through the sales cycle.
• Demonstrates thorough abilities to identify and address client needs, including developing and sustaining meaningful client relationships and understand the client's business.
• Proven people skills demonstrate thorough knowledge and/or a proven track record of success with operating in a professional services firm or large consultancy.
• Excellent written, oral, presentation skills, innovative thinker
• A proven record of success working seamlessly in a virtual environment to complete projects with team members based in various locations, domestically and globally.
• Demonstrates creative thinking, individual initiative, and flexibility in prioritizing and completing tasks.
• Keeps up to date with the GRC technology innovations - following the industry's advancements, challenges, and discovery.

Nice To Haves

• Bachelor's degree in Information Security, Risk Management, or related field.
• ServiceNow Certification: Certified System Administrator (CSA) (Mandatory) and one of other specialized certifications like Certified Implementation Specialist (CIS) in Security Operations (SecOps), Vendor Risk Management (VRM), and IRM (Integrated Risk Management).
• Certified Information Systems Security Professionals® (CISSP®); Certified Information Systems Auditor® (CISA®); Certified Information Security Manager® (CISM®); or equivalent security certifications.
• Experience with Microsoft tools such as Excel and PowerPoint.
• Delivery background with ITSM platforms such as ServiceNow, Jira, etc.
• Development and/or architecture experience with API connectors, data lake, or BI tools (e.g., PowerBI) for risk reporting) as well as automation and/or AI/ML services.

Responsibilities

• Business Development Leverage your existing network and personal brand in the marketplace to drive growth, which includes identifying and securing new opportunities.
• Manage multiple client pursuits, while providing leadership on extending existing account opportunities as well as identifying new account relationships.
• Establish a network of internal and external relationships that lead to a sustained book of business and market related growth strategy.
• Support vendor channel in order to identify and growth practice Client Experience Draw upon your demonstrated technical, compliance, and risk knowledge to become a trusted advisor to our clients.
• Provide expert guidance to team in implementation of GRC tools like ServiceNow, Archer, AuditBoard, OneTrust.
• Ability to assess and communicate regulatory, technology and risk considerations while leveraging cross functional teams to drive expertise through building internal talent and enabling our client experience.
• Communicate complex GRC technical issues to client senior management through the ability to transform such data to operations personnel and executive style reports and presentations.
• Enhance RSM's capability to respond to high-profile client needs as it relates to significant, complex compliance remediation and/or program transformation.
• Engage with internal and external stakeholders to gather requirements, provide updates, and obtain approvals for solution designs and implementations.
• Manage project deliverables ensuring adherence to timelines and quality standards.
• Talent Experience Effectively manage, motivate, and mentor multidisciplinary teams to work as a cohesive, client-centric unit in delivering high-quality solutions to sophisticated clients.
• Recruit and retain future leaders of the firm.
• Leverage your experience and expertise to advance the professional aspirations and skills of your colleagues.
• Innovation, Operations & Culture Lead the development of innovative solutions and approaches to serving clients based on evolving technological tools and trends.
• Oversee a diverse book of business, maintaining overall responsibility for the profitability, effective delivery, and engagement risk of all client-related work within the portfolio.
• Responsibility for coordination of teams to enhance P&L success, including driving net services and managing to margin metrics Model the core RSM values of respect, integrity, teamwork, excellence, and stewardship in all interactions with clients and team members.
• Recruit and retain an inclusive diverse group of qualified leaders of the firm.

Benefits

• At RSM, we offer a competitive benefits and compensation package for all our people.
• We offer flexibility in your schedule, empowering you to balance life's demands, while also maintaining your ability to serve clients.
• Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees