A risk represents a potential event or condition that could negatively affect business objectives. A control is a preventive or detective measure designed to reduce the likelihood or impact of that risk.

Example:
Risk: Unauthorized access to customer information.
Control: Multi-factor authentication and periodic access reviews.

I would first verify the assessment inputs and scoring methodology. Then I would check the configured likelihood and impact factors, calculation rules, related records, and any business rules affecting the score. After identifying the configuration or data issue, I would correct it in a controlled environment and retest the assessment.

I would check the following:

• Trigger conditions

• Record configuration

• User roles and permissions

• Workflow or Flow Designer conditions

• Approval configuration

• Business rules

• System logs and execution details

• Dependencies between related records

I would reproduce the issue in a test environment before making changes to production.

First, I would understand the regulatory requirement and identify the applicable entities and processes. Then I would map the requirement to policies, controls, and authority documents. I would configure assessments, evidence collection, ownership, remediation workflows, notifications, and reporting. Finally, I would test the complete lifecycle before deployment.

Mumbai is an important IT, consulting, financial-services, and enterprise-business hub, creating opportunities where governance, risk, compliance, cybersecurity, and ServiceNow skills intersect. Current Mumbai listings include ServiceNow GRC roles, including positions from Accenture and Deloitte.

Professionals can explore opportunities across major business and IT corridors such as Andheri, Powai, Vikhroli, Goregaon, Malad, BKC, Lower Parel, Thane, and Navi Mumbai. Job availability can change by company and project, so candidates should check current vacancies before applying.

Current job listings show demand for ServiceNow professionals with GRC/IRM skills. For example, an Accenture Mumbai position specifically lists ServiceNow Governance, Risk and Compliance (GRC) as a required skill, while Deloitte has also advertised ServiceNow-related positions in Mumbai.

Salary depends on experience, certification, technical skills, role, and employer. As a broader reference, AmbitionBox reported ₹3.2 lakh–₹12.5 lakh annually for ServiceNow Developers in Mumbai based on 258 salaries updated in June 2025. This is not a guaranteed salary for freshers or specifically for GRC/IRM professionals.