ServiceNow IRM / GRC / SecOps Principal Solution Architect (All Genders)

Role Summary

Lead enterprise ServiceNow risk, compliance, security, third-party risk, and resilience transformations. The role combines solution architecture, functional consulting, executive advisory, delivery governance, presales, and practice leadership across IRM, GRC, TPRM, BCM, Operational Resilience, and SecOps. 

Key Responsibilities

• Lead end-to-end architecture, design, and implementation of ServiceNow IRM, GRC, TPRM, BCM, Operational Resilience, and SecOps solutions. 

• Define target operating models, transformation roadmaps, platform governance, solution standards, and scalable integration patterns. 

• Translate business, regulatory, audit, risk, and security requirements into functional and technical designs, implementation plans, and measurable outcomes. 

• Architect IRM/GRC capabilities covering Enterprise and Operational Risk, Policy and Compliance, Audit, Regulatory Change, Issues, Exceptions, KRIs, Continuous Control Monitoring, and Automated Control Testing. 

• Design TPRM solutions covering third-party onboarding, due diligence, tiering, inherent and residual risk, SIG/SIG Lite assessments, scoring, remediation, and continuous monitoring. 

• Lead BCM and Operational Resilience design covering Business Impact Analysis, critical services and processes, dependency mapping, RTO/RPO, recovery planning, crisis management, scenario testing, and attestations. 

• Architect SecOps capabilities covering Security Incident Response, Vulnerability Response, Threat Intelligence, security exceptions, and integration of cyber findings with enterprise risk and compliance processes. 

• Design integrations using IntegrationHub, APIs, MID Server, CMDB, IAM, SIEM, vulnerability scanners, procurement, ERP, and related enterprise platforms. 

• Lead executive workshops, architecture reviews, solution demonstrations, and governance forums while acting as a trusted advisor to CIO, CISO, CRO, Risk, Compliance, Audit, and Security stakeholders. 

• Govern global delivery teams, solution quality, release and upgrade strategy, delivery risks, and post-production stabilization; mentor architects, consultants, developers, and business analysts. 

• Support RFP/RFI responses, estimations, proposals, client presentations, GTM offerings, reusable assets, accelerators, and practice growth. 

Required Qualifications

• 14+ years of experience in technology risk, GRC, compliance, audit, cybersecurity, security operations, or related consulting domains. 

• 8+ years of hands-on ServiceNow IRM/GRC architecture and implementation experience, including leadership of enterprise-scale, multi-module transformation programs. 

• Deep functional and platform expertise across IRM/GRC, TPRM, BCM, Operational Resilience, and SecOps, with strong knowledge of risk taxonomy, control frameworks, assessment methodologies, scoring, workflow, reporting, and integrations. 

• Experience leading global onshore/offshore teams, complex delivery engagements, architecture governance, and senior client stakeholder relationships. 

• Strong consulting, communication, presentation, analytical, problem-solving, and leadership skills. 

Preferred Qualifications / Certifications :-

ServiceNow: CTA, CMA, CAA, CIS-IRM, CIS-TPRM, CSA, or CAD. 

Risk & Security: CISSP, CISA, CISM, CRISC, CGEIT, ISO 27001, ISO 22301, or CBCP. 

Framework & Regulatory Knowledge 

Working knowledge of NIST, ISO 27001, ISO 22301, COBIT, COSO, SOX, PCI DSS, GDPR, DORA, NIS2, FFIEC, and relevant industry risk, compliance, security, and resilience requirements. 

Leadership Skills

• Strong consulting, communication, and stakeholder management skills.


• Experience leading global delivery teams and large transformation programs.


• Ability to engage CIO, CISO, CRO, Risk, Compliance, and Audit leadership.

Success Profile 

A strategic, hands-on ServiceNow architect who can shape solutions, influence executives, govern complex global delivery, mentor teams, and drive business value across IRM, GRC, TPRM, BCM, Operational Resilience, and SecOps.