Senior ServiceNow GRC Solution Architect

Argyllinfotech

  • Washington, DC
  • 2 days ago

    Highlights

    Key Responsibilities ServiceNow GRC / IRM Architecture Architect, design, and implement an enterprise-wide Cyber Risk Register using ServiceNow GRC/IRM capabilities. Enterprise Integration & Data Architecture Integrate ServiceNow GRC/IRM capabilities with enterprise IT, cybersecurity, security operations, and other related platforms.

    Numbers & Facts

    LocationWashington, DC

    Description

    Job Title: Senior ServiceNow GRC Solution Architect
    Location: Washington, DC
    Work Arrangement: Onsite
    Position Type: Contract

    Client: Amtrak
    Key Responsibilities
    ServiceNow GRC / IRM Architecture
    • Architect, design, and implement an enterprise-wide Cyber Risk Register using ServiceNow GRC/IRM capabilities.
    • Develop scalable solutions for centralized cyber risk identification, assessment, scoring, mitigation, monitoring, and remediation.
    • Design and implement automated risk workflows, approval processes, escalation mechanisms, and remediation tracking.
    • Develop customized reporting, dashboards, and risk visibility solutions for business and executive stakeholders.
    • Ensure ServiceNow GRC solutions align with enterprise architecture and long-term technology strategies.
    GRC Process Automation
    • Translate business, cybersecurity, risk management, and compliance requirements into technical architecture and ServiceNow solutions.
    • Automate risk identification, assessment, treatment, mitigation, escalation, and closure processes.
    • Define standardized processes to improve enterprise risk visibility and consistency.
    • Identify opportunities to optimize existing GRC processes through ServiceNow automation.
    • Ensure workflows support appropriate governance, controls, approvals, and auditability.
    Cybersecurity & Risk Management
    • Apply practical knowledge of cybersecurity controls and enterprise risk management frameworks.
    • Align GRC architecture and risk processes with NIST Cybersecurity Framework (NIST CSF) and NIST SP 800-53.
    • Support enterprise cyber risk visibility and risk posture management.
    • Ensure risk data, controls, remediation activities, and audit evidence are traceable and maintainable.
    • Support regulatory compliance and enterprise audit-readiness initiatives.
    Enterprise Integration & Data Architecture
    • Integrate ServiceNow GRC/IRM capabilities with enterprise IT, cybersecurity, security operations, and other related platforms.
    • Ensure data integrity, consistency, traceability, and auditability across integrated systems.
    • Define integration patterns and data flows between ServiceNow and heterogeneous enterprise applications.
    • Collaborate with technical teams to identify integration dependencies and resolve architectural challenges.
    Solution Architecture & Project Leadership
    • Lead technical activities throughout the full project lifecycle, including:
      • Project scoping
      • Requirements gathering
      • Business analysis
      • Solution architecture
      • Technical design
      • Implementation
      • Integration
      • Testing
      • Deployment
      • Post-production support
    • Evaluate solution alternatives and provide architecture recommendations.
    • Create technical designs, architecture documentation, and implementation strategies.
    • Ensure solutions are scalable, secure, maintainable, and aligned with enterprise standards.
    Stakeholder & Executive Engagement
    • Partner with business leaders, IT leadership, cybersecurity teams, risk committees, and other stakeholders.
    • Present architecture options and recommendations to senior leadership and governance committees.
    • Facilitate discussions and drive consensus across diverse stakeholder groups.
    • Translate complex technical and cybersecurity concepts into clear business-level recommendations.
    • Provide executive leadership with actionable visibility into enterprise cyber risks, remediation progress, and overall risk posture.
    Required Qualifications
    • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.
    • 8 15+ years of overall IT experience.
    • 2 5+ years of focused Governance, Risk, and Compliance (GRC) experience.
    • Strong experience architecting and implementing enterprise-scale ServiceNow solutions.
    • Proven hands-on expertise with ServiceNow GRC / Integrated Risk Management (IRM).
    • Experience designing and implementing Cyber Risk Registers or comparable enterprise risk management solutions.
    • Strong understanding of cybersecurity controls, risk management, and governance processes.
    • Practical knowledge of:
      • NIST Cybersecurity Framework (NIST CSF)
      • NIST SP 800-53
    • Demonstrated experience working as a Solution Architect across large-scale, heterogeneous IT environments.
    • Strong understanding of enterprise information management and risk architecture.
    • Experience with ServiceNow workflows, automation, reporting, dashboards, and integrations.
    • Strong understanding of data integrity, traceability, auditability, and enterprise integrations.
    • Excellent verbal and written communication skills.
    • Proven ability to influence senior stakeholders, present to committees, facilitate discussions, and build consensus.
    • Strong analytical, problem-solving, and strategic-thinking skills.
    Preferred Qualifications
    • Experience delivering technology solutions within the public sector.
    • Experience in the transportation, transit, railroad, or travel industry.
    • Experience working with large transportation or infrastructure organizations.
    • Strong knowledge of enterprise information management and risk architecture.
    • Experience with Secure Software Development Life Cycle (SSDLC) practices.
    • Experience integrating ServiceNow GRC with enterprise cybersecurity and IT platforms.
    • Experience supporting regulatory compliance, governance, and audit-readiness initiatives.
    • ServiceNow certifications related to GRC, IRM, or Solution Architecture are a plus.
    Key Skills
    ServiceNow GRC / IRM
    ServiceNow Solution Architecture
    Cyber Risk Register
    Governance, Risk & Compliance (GRC)
    Cybersecurity Risk Management
    NIST CSF
    NIST SP 800-53
    Risk Assessment & Risk Scoring
    Risk Mitigation & Remediation Tracking
    ServiceNow Workflow & Automation
    ServiceNow Reporting & Dashboards
    Enterprise Architecture
    Enterprise System Integration
    Data Integrity & Auditability
    Cybersecurity Controls
    Compliance & Governance
    Secure SDLC
    Stakeholder & Executive Management
    Public Sector / Transportation Experience

    Similar Jobs

    See more jobs