Servicenow Secops Engineer

We are seeking a Senior ServiceNow GRC Solution Architect to lead the design and implementation of an enterprise-wide Cyber Risk Register in ServiceNow . The ideal candidate will translate complex cyber risk requirements into scalable, automated ServiceNow solutions, including workflows, reporting, dashboards, risk scoring, and remediation tracking. This is a high-visibility role requiring strong collaboration with business and IT leadership, risk committees, and cross-functional stakeholders to establish scalable GRC architecture and improve enterprise risk visibility, governance, and audit readiness.

• Design and implement a centralized enterprise Cyber Risk Register in ServiceNow .
• Develop automated workflows, risk scoring, custom reports, dashboards, and remediation tracking.
• Partner with business teams, IT leaders, and risk committees to define future-state GRC architecture.
• Present technical solutions, gain stakeholder concurrence, and drive consensus across teams.
• Translate business and risk management requirements into scalable technical architecture.
• Automate and optimize risk identification, assessment, mitigation, and escalation processes.
• Integrate ServiceNow GRC/IRM modules with enterprise IT and security platforms.
• Ensure data integrity, traceability, and auditability across integrated platforms.
• Lead technical activities throughout the full project lifecycle, including scoping, requirements gathering, architecture, implementation, and post-deployment support.
• Provide executive leadership with actionable visibility into cyber risks, remediation progress, and overall enterprise risk posture.
• Support regulatory compliance and audit readiness initiatives.

• Bachelor's degree or equivalent experience.
• 8 15+ years of overall IT experience.
• 2 5+ years of experience specifically within Governance, Risk, and Compliance (GRC).
• Proven experience architecting and deploying large-scale ServiceNow solutions , particularly GRC/Integrated Risk Management (IRM) .
• Strong practical knowledge of cybersecurity controls and risk frameworks, including NIST CSF and NIST 800-53 .
• Demonstrated experience serving as a Solution Architect across multiple large-scale, heterogeneous IT programs.
• Strong stakeholder management and communication skills.
• Ability to present to executive committees, influence senior stakeholders, and build consensus.

• Experience delivering IT solutions within the public sector, transit, travel, or transportation industries .
• Strong knowledge of enterprise information management and risk architecture.
• Experience with secure software development lifecycles (SSDLC).
• Strong understanding of enterprise cybersecurity, governance, risk, and compliance practices.

For applications and inquiries,