> Markdown version of [/jobs/ext/1982725-senior-servicenow-cyber-risk-architect](https://www.wearedevelopers.com/jobs/ext/1982725-senior-servicenow-cyber-risk-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior ServiceNow Cyber Risk Architect

- **Company:** Lumen Solutions Inc.
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Expert
- **Salary:** $26,000.0
- **Contract:** Permanent contract
- **Skills:** Computer-Aided Design, Configuration Management Databases, Cyber Security, Systems Integration, Software Vulnerability Management, Cyber Threat Analysis, CIS Benchmarks, Servicenow
- **Published:** August 8, 2026
- **Apply:** https://www2.jobdiva.com/portal/?a=yyjdnwtj1vk20likwp2a7oa2mc2scw064c948z22g23e046qehohegye8oqt3zi6&compid=0/jobs/29035764#/jobs/29035764

## About the Role

* Strong senior-level ServiceNow architecture and implementation experience.
 * Hands-on experience with ServiceNow IRM/GRC or enterprise risk-management solutions.
 * Strong understanding of cyber risk management, risk scoring, risk acceptance, remediation, controls, and audit evidence.
 * Experience with ServiceNow workflows, data models, reporting, dashboards, integrations, and role-based access.
 * Strong stakeholder management and ability to lead requirements and solution-design sessions.

Preferred

 * ServiceNow IRM/GRC, Security Operations, or Vulnerability Response experience.
 * ServiceNow CSA, CAD, CIS-Risk and Compliance, or CIS-Security Operations certification.
 * Knowledge of NIST CSF, NIST 800-53, ISO 27001, CIS Controls, FAIR, or similar frameworks.
 * Experience in large, regulated or complex enterprise environments.

## Description

We are seeking a Senior ServiceNow Cyber Risk Architect to lead the design and implementation of an enterprise Cyber Risk Register within ServiceNow. This role will establish a scalable and auditable solution for cyber-risk intake, assessment, ownership, remediation, workflow automation, and executive reporting., * Architect and implement an enterprise Cyber Risk Register using ServiceNow IRM/GRC.

 * Design end-to-end risk workflows covering intake, assessment, scoring, approvals, remediation, exceptions, and closure.
 * Develop ServiceNow data models, forms, workflows, dashboards, reports, notifications, roles, and integrations.
 * Define risk documentation for inherent/residual risk, controls, treatment plans, evidence, and remediation status.
 * Partner with Cybersecurity, Risk, Compliance, Audit, IT, and business stakeholders to translate requirements into scalable solutions.
 * Lead solution design, testing, deployment, documentation, and knowledge transfer.
 * Identify integration opportunities with CMDB, vulnerability management, security operations, controls, audit, and asset data.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)