GRC Consultant

Job description : OpenKyber is seeking a Senior ServiceNow GRC Solution Architect to lead the design and implementation of an enterprise-wide Cyber Risk Register in ServiceNow for a major transportation client in Washington, D.C . Serving as a key strategic advisor across business and IT units, you will translate complex cyber risk requirements into scalable, automated ServiceNow solutions-including workflows, reporting, dashboards, and remediation tracking. In this high-visibility role, you will interface with cross-functional leadership, drive consensus, and align GRC architecture with NIST frameworks to enhance enterprise risk visibility, strengthen governance, and ensure audit readiness throughout the project lifecycle., Strategic Vision & Consensus Building: Partner with cross-functional business areas, IT leaders, and risk committees to define the future-state GRC architecture , present solutions, gain concurrence, and ensure sustainable service delivery. Process Automation & Optimization: Enable consistent risk identification, assessment, mitigation, and escalation processes by translating business and risk management requirements into technical architecture. Platform Integration & Data Integrity: Integrate ServiceNow GRC modules with related enterprise IT and security platforms, ensuring data integrity, traceability, and auditability. Full Lifecycle Leadership: Lead technical efforts across all phases of the project lifecycle-from initial scoping and requirements gathering through architecture design, implementation, and post-deployment alignment. Executive Visibility & Governance: Provide executive leadership with actionable visibility into enterprise cyber risks, remediation progress, and overall risk posture to support regulatory compliance and audit readiness. For applications and inquiries, contact:hirings@openkyber.com

Education & Experience: Bachelor’s degree (or equivalent experience) with 8 15+ years in IT, including 2 5+ years focused specifically within a Governance, Risk, and Compliance (GRC) function. ServiceNow Expertise: Proven track record of successfully architecting and deploying large-scale ServiceNow solutions, particularly within GRC/Integrated Risk Management (IRM). Cybersecurity Frameworks: Strong practical knowledge of cybersecurity controls and risk frameworks, specifically NIST CSF and NIST 800-53. Large-Scale Architecture: Demonstrated experience acting as a Solution Architect across multiple heterogeneous, large-scale IT programs. Stakeholder Management: Exceptional verbal and written communication skills with a proven ability to present to committees, influence senior stakeholders, and build consensus. Experience delivering IT solutions within the public sector, transit, or travel/transportation industry. Deep grounding in enterprise information management, risk architecture, and secure software development lifecycles. Architect & Implement GRC Capability: Design and deploy a centralized, enterprise Cyber Risk Register in ServiceNow, including automated workflows, risk scoring , custom reporting, dashboards, and remediation tracking.