Senior ServiceNow GRC Solution Architect

We are seeking a Senior ServiceNow GRC Solution Architect to lead the design and implementation of an enterprise-wide Cyber Risk Register in ServiceNow. The ideal candidate will translate complex cyber risk requirements into scalable, automated ServiceNow solutions, including workflows, reporting, dashboards, risk scoring, and remediation tracking.

This is a high-visibility role requiring strong collaboration with business and IT leadership, risk committees, and cross-functional stakeholders to establish scalable GRC architecture and improve enterprise risk visibility, governance, and audit readiness.

Key Responsibilities:

Design and implement a centralized enterprise Cyber Risk Register in ServiceNow.

Develop automated workflows, risk scoring, custom reports, dashboards, and remediation tracking.

Partner with business teams, IT leaders, and risk committees to define future-state GRC architecture.

Present technical solutions, gain stakeholder concurrence, and drive consensus across teams.

Translate business and risk management requirements into scalable technical architecture.

Automate and optimize risk identification, assessment, mitigation, and escalation processes.

Integrate ServiceNow GRC/IRM modules with enterprise IT and security platforms.

Ensure data integrity, traceability, and auditability across integrated platforms.

Lead technical activities throughout the full project lifecycle, including scoping, requirements gathering, architecture, implementation, and post-deployment support.

Provide executive leadership with actionable visibility into cyber risks, remediation progress, and overall enterprise risk posture.

Support regulatory compliance and audit readiness initiatives.

Required Qualifications:

Bachelor’s degree or equivalent experience.

8–15+ years of overall IT experience.

2–5+ years of experience specifically within Governance, Risk, and Compliance (GRC).

Proven experience architecting and deploying large-scale ServiceNow solutions, particularly GRC/Integrated Risk Management (IRM).

Strong practical knowledge of cybersecurity controls and risk frameworks, including NIST CSF and NIST 800-53.

Demonstrated experience serving as a Solution Architect across multiple large-scale, heterogeneous IT programs.

Strong stakeholder management and communication skills.

Ability to present to executive committees, influence senior stakeholders, and build consensus.

Preferred Qualifications:

Experience delivering IT solutions within the public sector, transit, travel, or transportation industries.

Strong knowledge of enterprise information management and risk architecture.

Experience with secure software development lifecycles (SSDLC).

Strong understanding of enterprise cybersecurity, governance, risk, and compliance practices.

Location Requirement:
This is an onsite position in Washington, DC. Local candidates are strongly preferred.