About the role

ServiceNow IRM / GRC / SecOps Principal Solution Architect

Role Summary

Lead enterprise ServiceNow risk, compliance, security, third-party risk, and resilience transformations. The role combines solution architecture, functional consulting, executive advisory, delivery governance, presales, and practice leadership across IRM, GRC, TPRM, BCM, Operational Resilience, and SecOps.

Key Responsibilities

Lead end-to-end architecture, design, and implementation of ServiceNow IRM, GRC, TPRM, BCM, Operational Resilience, and SecOps solutions.
Define target operating models, transformation roadmaps, platform governance, solution standards, and scalable integration patterns.
Translate business, regulatory, audit, risk, and security requirements into functional and technical designs, implementation plans, and measurable outcomes.
Architect IRM/GRC capabilities covering Enterprise and Operational Risk, Policy and Compliance, Audit, Regulatory Change, Issues, Exceptions, KRIs, Continuous Control Monitoring, and Automated Control Testing.
Design TPRM solutions covering third-party onboarding, due diligence, tiering, inherent and residual risk, SIG/SIG Lite assessments, scoring, remediation, and continuous monitoring.
Lead BCM and Operational Resilience design covering Business Impact Analysis, critical services and processes, dependency mapping, RTO/RPO, recovery planning, crisis management, scenario testing, and attestations.
Architect SecOps capabilities covering Security Incident Response, Vulnerability Response, Threat Intelligence, security exceptions, and integration of cyber findings with enterprise risk and compliance processes.
Design integrations using IntegrationHub, APIs, MID Server, CMDB, IAM, SIEM, vulnerability scanners, procurement, ERP, and related enterprise platforms.
Lead executive workshops, architecture reviews, solution demonstrations, and governance forums while acting as a trusted advisor to CIO, CISO, CRO, Risk, Compliance, Audit, and Security stakeholders.
Govern global delivery teams, solution quality, release and upgrade strategy, delivery risks, and post-production stabilization; mentor architects, consultants, developers, and business analysts.
Support RFP/RFI responses, estimations, proposals, client presentations, GTM offerings, reusable assets, accelerators, and practice growth.

Required Qualifications

14+ years of experience in technology risk, GRC, compliance, audit, cybersecurity, security operations, or related consulting domains