Do you have Compliance Core (com.snc.certification_core) plugin enabled? If so as mentioned in this article there are two business rules that manage the role:
https://docs.servicenow.com/bundle/kingston-servicenow-platform/page/product/compliance/reference/r_...
Look at the user roles section for details.
