> Markdown version of [/jobs/ext/2044897-senior-servicenow-grc-solution-architect](https://www.wearedevelopers.com/jobs/ext/2044897-senior-servicenow-grc-solution-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior ServiceNow GRC Solution Architect - **Company:** MANTECH-3 LLC - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Audit Trail, Cyber Security, Data Architecture, Data Integrity, Enterprise Information Management, IT Management, Systems Development Life Cycle, Raw Data, Software Engineering, Data Streaming, Enterprise Software Applications, Information Technology, Enterprise Integration, Servicenow - **Published:** August 13, 2026 - **Apply:** https://www.careerjet.com/jobad/usd133aae9d944fffe6dc0add5aafcafab ## About the Role * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience. * 8 15+ years of overall IT experience. * 2 5+ years of focused Governance, Risk, and Compliance (GRC) experience. * Strong experience architecting and implementing enterprise-scale ServiceNow solutions. * Proven hands-on expertise with ServiceNow GRC / Integrated Risk Management (IRM). * Experience designing and implementing Cyber Risk Registers or comparable enterprise risk management solutions. * Strong understanding of cybersecurity controls, risk management, and governance processes. * Practical knowledge of: * NIST Cybersecurity Framework (NIST CSF) * NIST SP 800-53 * Demonstrated experience working as a Solution Architect across large-scale, heterogeneous IT environments. * Strong understanding of enterprise information management and risk architecture. * Experience with ServiceNow workflows, automation, reporting, dashboards, and integrations. * Strong understanding of data integrity, traceability, auditability, and enterprise integrations. * Excellent verbal and written communication skills. * Proven ability to influence senior stakeholders, present to committees, facilitate discussions, and build consensus. * Strong analytical, problem-solving, and strategic-thinking skills., * Experience delivering technology solutions within the public sector. * Experience in the transportation, transit, railroad, or travel industry. * Experience working with large transportation or infrastructure organizations. * Strong knowledge of enterprise information management and risk architecture. * Experience with Secure Software Development Life Cycle (SSDLC) practices. * Experience integrating ServiceNow GRC with enterprise cybersecurity and IT platforms. * Experience supporting regulatory compliance, governance, and audit-readiness initiatives. * ServiceNow certifications related to GRC, IRM, or Solution Architecture are a plus. ## Description ServiceNow GRC / IRM Architecture * Architect, design, and implement an enterprise-wide Cyber Risk Register using ServiceNow GRC/IRM capabilities. * Develop scalable solutions for centralized cyber risk identification, assessment, scoring, mitigation, monitoring, and remediation. * Design and implement automated risk workflows, approval processes, escalation mechanisms, and remediation tracking. * Develop customized reporting, dashboards, and risk visibility solutions for business and executive stakeholders. * Ensure ServiceNow GRC solutions align with enterprise architecture and long-term technology strategies. GRC Process Automation * Translate business, cybersecurity, risk management, and compliance requirements into technical architecture and ServiceNow solutions. * Automate risk identification, assessment, treatment, mitigation, escalation, and closure processes. * Define standardized processes to improve enterprise risk visibility and consistency. * Identify opportunities to optimize existing GRC processes through ServiceNow automation. * Ensure workflows support appropriate governance, controls, approvals, and auditability. Cybersecurity & Risk Management * Apply practical knowledge of cybersecurity controls and enterprise risk management frameworks. * Align GRC architecture and risk processes with NIST Cybersecurity Framework (NIST CSF) and NIST SP 800-53. * Support enterprise cyber risk visibility and risk posture management. * Ensure risk data, controls, remediation activities, and audit evidence are traceable and maintainable. * Support regulatory compliance and enterprise audit-readiness initiatives. Enterprise Integration & Data Architecture * Integrate ServiceNow GRC/IRM capabilities with enterprise IT, cybersecurity, security operations, and other related platforms. * Ensure data integrity, consistency, traceability, and auditability across integrated systems. * Define integration patterns and data flows between ServiceNow and heterogeneous enterprise applications. * Collaborate with technical teams to identify integration dependencies and resolve architectural challenges. Solution Architecture & Project Leadership * Lead technical activities throughout the full project lifecycle, including: * Project scoping * Requirements gathering * Business analysis * Solution architecture * Technical design * Implementation * Integration * Testing * Deployment * Post-production support * Evaluate solution alternatives and provide architecture recommendations. * Create technical designs, architecture documentation, and implementation strategies. * Ensure solutions are scalable, secure, maintainable, and aligned with enterprise standards. Stakeholder & Executive Engagement * Partner with business leaders, IT leadership, cybersecurity teams, risk committees, and other stakeholders. * Present architecture options and recommendations to senior leadership and governance committees. * Facilitate discussions and drive consensus across diverse stakeholder groups. * Translate complex technical and cybersecurity concepts into clear business-level recommendations. * Provide executive leadership with actionable visibility into enterprise cyber risks, remediation progress, and overall risk posture., ServiceNow GRC / IRM ServiceNow Solution Architecture Cyber Risk Register Governance, Risk & Compliance (GRC) Cybersecurity Risk Management NIST CSF NIST SP 800-53 Risk Assessment & Risk Scoring Risk Mitigation & Remediation Tracking ServiceNow Workflow & Automation ServiceNow Reporting & Dashboards Enterprise Architecture Enterprise System Integration Data Integrity & Auditability Cybersecurity Controls Compliance & Governance Secure SDLC Stakeholder & Executive Management Public Sector / Transportation Experience, Senior Distinguished Engineer, AI Compute (Remote Eligible) At Capital One, we are creating responsible and reliable AI systems, changing banking for good. For years, Capital One h… + 21 hours ago + ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems) - [Data Governance in the Era of AI](https://www.wearedevelopers.com/videos/1622-data-governance-in-the-era-of-ai) - [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)