Servicenow Architect

Immediate Joiners or people with 15 to 20 Days notice only would be considered.

The Service Now GRC / IRM Architect serves as the senior-most technical authority for the organisation's Service Now Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) ecosystem. This role is responsible for designing, implementing, and governing scalable, enterprise-grade solutions that protect the business, satisfy global regulators, and provide leadership with real-time risk intelligence.

The Architect will act as a strategic partner to Risk, Audit, Legal, Privacy, and CISO functions driving a multi-year roadmap to automate and modernise the GRC programme, and embedding AI-driven risk capabilities across the platform.

• Serve as the authoritative solution architect for the Service Now IRM/GRC platform leading end-to-end design and delivery across Policy & Compliance, Risk Management, Audit Management, Issues Management, Vendor Risk, BCM, and AI Control Tower
• Define and maintain the enterprise IRM architecture and multi-year technology roadmap aligned to the organisation's regulatory strategy and risk appetite
• Ensure all solutions are scalable, secure, compliant, and aligned with Service Now platform best practices and CSDM / CMDB data models
• Minimise customisation; drive OOTB adoption and enforce architectural governance throughout the implementation lifecycle

• Design enterprise risk frameworks including risk registers, control libraries, risk appetite statements, and automated control testing workflows
• Architect third-party / vendor risk management programmes — assessment workflows, scorecards, continuous monitoring, and due diligence processes
• Configure and govern the AI Control Tower module for AI model risk management, AI inventory, and AI governance controls aligned to EU AI Act, DORA, and SEC requirements
• Own the BCM / DR module blueprint — integrating risk assessment workflows with operational recovery planning to strengthen organisational resilience

• Define integration strategies with SIEM/SOAR tools (Splunk, Microsoft Sentinel), vulnerability management platforms (Qualys, Tenable), ERP systems (SAP), and identity platforms
• Architect integrations with the Service Now Sec Ops suite — Vulnerability Response and Security Incident Response — to create a unified cyber-risk posture
• Ensure control-to-asset accuracy via CMDB / CSDM alignment and service mapping

• Lead GRC workshops, design sessions, and architecture reviews with Audit, Legal, Privacy, Risk, and CISO stakeholders
• Act as a trusted advisor to senior client and executive stakeholders on GRC and risk transformation initiatives
• Mentor GRC developers and consultants; conduct code and design reviews; set development standards

• Bachelor's degree in Information Technology, Computer Science, Information Security, Risk Management, or a related field (required)
• Master's degree (MBA, MSc Cybersecurity, or MSc Risk Management) is strongly preferred for Principal-level roles

• 10–14 years of total professional experience in IT, with a minimum of 5 years of hands‑on Service Now IRM / GRC implementation experience
• Demonstrated experience as a lead or architect on a minimum of 2 enterprise-scale GRC / IRM implementations, covering multiple modules
• 2–3 years in a lead or architect capacity, with accountability for solution design and delivery governance
• Prior experience in regulated industries is strongly preferred:
• Banking, Financial Services & Insurance (BFSI)
• Healthcare / Life Sciences
• Defence & Government
• Energy & Utilities
• Experien…