ServiceNow GRC Solution Architect

• Lead the architecture, design, and implementation of ServiceNow Integrated Risk Management solutions, particularly Risk Management and Policy and Compliance Management.
• Work with risk, compliance, audit, security, legal, and business stakeholders to understand obligations, operating models, and desired outcomes, and translate them into solution designs.
• Define architectures for authority documents, citations, policies, control objectives, controls, entities, risk statements, assessments, indicators, attestations, issues, remediation tasks, and related workflows.
• Design traceable, reusable relationships between regulatory obligations, policies, risks, controls, evidence, findings, and remediation activities.
• Develop and maintain architectural views, data models, integration designs, decision records, configuration standards, and technical specifications.
• Promote configuration-first, upgrade-safe use of out-of-the-box ServiceNow IRM capabilities and challenge unnecessary customization.
• Provide technical leadership to delivery teams and review configurations, extensions, and code for security, quality, performance, and maintainability.
• Architect integrations between ServiceNow IRM and enterprise systems, regulatory content providers, data sources, and evidence repositories.
• Enable automated assessments, continuous control monitoring, risk indicators, attestations, and evidence collection where appropriate.
• Embed security, privacy, segregation of duties, confidential-record handling, data quality, and auditability in solution designs.
• Support projects through architecture review, design assurance, testing, deployment, and governance processes.
• Troubleshoot complex cross-module and integration issues and guide teams toward sustainable resolutions.
• Shape the ServiceNow IRM roadmap, standards, and reusable patterns, keeping current with product releases and risk and compliance practices.
• Mentor architects and delivery colleagues and contribute to continuous improvement across the ServiceNow architecture practice.

Technologies:

• Architect
• Support
• JavaScript
• Security
• ServiceNow
• Embedded
• Marketing

More:

We are Deloitte, and this permanent or fixed-term role sits within our Enabling Functions business, supporting the wider organization through our Global ServiceNow Center of Excellence. Our Deloitte Technology teams develop and operate technology that supports and protects Deloitte around the world. The role is based in one of our UK offices in Aberdeen, Belfast, Birmingham, Bristol, Cambridge, Cardiff, Manchester, or Milton Keynes, with hybrid working that may include office, virtual collaboration spaces, client sites, and remote work, depending on role requirements. We offer a collaborative, inclusive culture focused on flexibility, wellbeing, and professional development, with opportunities to build technical and personal skills and grow your career. Our shared values are leading the way, serving with integrity, taking care of each other, fostering inclusion, and collaborating for measurable impact. Certain personal independence restrictions may apply, including constraints on financial interests or employment relationships involving audit clients; further details are provided during recruitment.

• Certified ServiceNow Administrator (CSA) certification.
• Certified Implementation Specialist - Risk and Compliance (CIS-RC), or the current equivalent ServiceNow Integrated Risk Management certification.
• Demonstrable ServiceNow solution or technical architecture experience, including substantial hands-on experience with Risk and Compliance or Integrated Risk Management.
• Proven track record leading end-to-end ServiceNow IRM solution designs and delivering complex, enterprise-scale implementations.
• Deep knowledge of ServiceNow Risk Management and Policy and Compliance Management, including their data relationships and workflows.
• Experience designing risk frameworks, assessment methodologies, inherent and residual risk scoring, risk appetite and tolerance, control testing, continuous monitoring, and compliance reporting.
• Experience mapping regulatory obligations and internal policies to controls, and designing traceable evidence, exception, and remediation processes.
• Strong understanding of ServiceNow platform architecture, data and security models, workspaces, reporting, workflow automation, and upgrade-safe design practices.
• Experience integrating IRM with enterprise systems and data sources using APIs, IntegrationHub, or other appropriate technologies.
• Working knowledge of ServiceNow scripting, including JavaScript and GlideRecord, sufficient to assess technical feasibility and assure solution quality.
• Experience with Agile and Waterfall delivery approaches and the full software development lifecycle.
• Solid understanding of IT governance, architecture governance, data security and privacy, change and release management, testing, and audit requirements.
• Excellent written and verbal communication, interpersonal, and presentation skills, including the ability to explain complex risk, compliance, and technical concepts to technical and non-technical audiences.