ServiceNow Architect - GRC / Integrated ...

NewVision Software; Pune District; Hybrid; INR 1,500,000 - 2,200,000; Full time

Job summary

New Vision Softcom & Consultancy Pvt. Ltd in Pune, India seeks a ServiceNow Architect for GRC/IRM to lead design, delivery, and governance of enterprise IRM and GRC solutions.

You will partner with Risk, Audit, Legal, Privacy, and CISO to drive multi-year roadmaps and implement AI-enabled risk capabilities. Responsibilities include end-to-end architecture across policy, compliance, risk, audit, vendor risk, BCM, integration with SIEM, SAP, and SecOps; ensure CMDB alignment, promote OOTB

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Security, Risk Management, or a related field (required)
• Master's degree (MBA, MSc Cybersecurity, or MSc Risk Management) preferred for principal roles
• 10–14 years total IT experience with 5+ years ServiceNow IRM/GRC implementations
• Lead/architect on at least 2 enterprise-scale GRC/IRM implementations
• 2–3 years in lead/architect capacity with delivery governance

Responsibilities

• Serve as authoritative solution architect for ServiceNow IRM/GRC platform across Policy & Compliance, Risk Management, Audit Management, Issues Management, Vendor Risk, BCM, and AI Control Tower
• Define enterprise IRM architecture and multi-year technology roadmap aligned to regulatory strategy
• Ensure scalable, secure, compliant solutions and CMDB/CSDM alignment
• Minimise customisation and promote out-of-the-box adoption with governance
• Architect risk frameworks including risk registers, control libraries, and automated testing workflows
• Oversee vendor risk management programs and due diligence processes
• Configure and govern AI Control Tower for AI model risk management and governance
• Own BCM/DR module blueprint integrating risk workflows with recovery planning
• Define integration strategies with SIEM/SOAR, vulnerability management, ERP systems (SAP), and identity platforms
• Architect integrations with ServiceNow SecOps and create a unified cyber-risk posture
• Lead GRC workshops with Audit, Legal, Privacy, Risk, and CISO
• Mentor GRC developers; conduct code/design reviews; set development standards

Job description

ServiceNow Architect - GRC / Integrated ...

ServiceNow Architect - GRC / Integrated ...

NVS/SA-G-IRM/1764401

• IT-IS
• Pune

End Date 09 Jun 2027

Required Experience 10 - 15 years

Basic Section

Grade --

Role Architect

Employment Type Full Time

Employee Category --

Organisational

Group Company NewVison

Company Name New Vision Softcom & Consultancy Pvt. Ltd

Function Business Units (BU)

Department/Practice IT-IS

Organization Unit ITIS - Service Now

Region APAC

Country India

Base office location Pune

Working model Hybrid

Weekly Off Pune office Standard

State Maharashtra

Skills

Skill

CERTIFICATION

Working Language

Job Description

1. POSITION PURPOSE

The ServiceNow GRC / IRM Architect serves as the senior-most technical authority for the organisation's ServiceNow Integrated Risk Management (IRM) and Governance, Risk & Compliance (GRC) ecosystem. This role is responsible for designing, implementing, and governing scalable, enterprise-grade solutions that protect the business, satisfy global regulators, and provide leadership with real-time risk intelligence.

The Architect will act as a strategic partner to Risk, Audit, Legal, Privacy, and CISO functions — driving a multi-year roadmap to automate and modernise the GRC programme, and embedding AI-driven risk capabilities across the platform.

2. KEY RESPONSIBILITIES

• Serve as the authoritative solution architect for the ServiceNow IRM/GRC platform — leading end-to-end design and delivery across Policy & Compliance, Risk Management, Audit Management, Issues Management, Vendor Risk, BCM, and AI Control Tower
• Define and maintain the enterprise IRM architecture and multi-year technology roadmap aligned to the organisation's regulatory strategy and risk appetite
• Ensure all solutions are scalable, secure, compliant, and aligned with ServiceNow platform best practices and CSDM / CMDB data models
• Minimise customisation; drive OOTB adoption and enforce architectural governance throughout the implementation lifecycle
• Design enterprise risk frameworks including risk registers, control libraries, risk appetite statements, and automated control testing workflows
• Architect third-party / vendor risk management programmes — assessment workflows, scorecards, continuous monitoring, and due diligence processes
• Configure and govern the AI Control Tower module for AI model risk management, AI inventory, and AI governance controls aligned to EU AI Act, DORA, and SEC requirements
• Own the BCM / DR module blueprint — integrating risk assessment workflows with operational recovery planning to strengthen organisational resilience

2.3 Integration & Technical Delivery

• Define integration strategies with SIEM/SOAR tools (Splunk, Microsoft Sentinel), vulnerability management platforms (Qualys, Tenable), ERP systems (SAP), and identity platforms
• Architect integrations with the ServiceNow SecOps suite — Vulnerability Response and Security Incident Response — to create a unified cyber-risk posture
• Ensure control-to-asset accuracy via CMDB / CSDM alignment and service mapping

2.4 Stakeholder Engagement & Leadership

• Lead GRC workshops, design sessions, and architecture reviews with Audit, Legal, Privacy, Risk, and CISO stakeholders
• Act as a trusted advisor to senior client and executive stakeholders on GRC and risk transformation initiatives
• Mentor GRC developers and consultants; conduct code and design reviews; set development standards

3. QUALIFICATIONS

3.1 Education

• Bachelor's degree in Information Technology, Computer Science, Information Security, Risk Management, or a related field (required)
• Master's degree (MBA, MSc Cybersecurity, or MSc Risk Management) is strongly preferred for Principal-level roles

3.2 Experience

• 10–14 years of total professional experience in IT, with a minimum of 5 years of hands-on ServiceNow IRM / GRC implementation experience
• Demonstrated experience as a lead or architect on a minimum of 2 enterprise-scale GRC / IRM implementations, covering multiple modules
• 2–3 years in a lead or architect capacity, with accountability for solution design and delivery governance
• Prior experience in regulated industries is strongly preferred:
• Banking, Financial Services & Insurance (BFSI)
• Defence & Government
• Energy & Utilities
• Experience migrating from legacy GRC platforms (RSA Archer, MetricStream, ServiceNow SRM) is advantageous

4. TECHNICAL SKILLS

4.1 ServiceNow IRM / GRC Modules

• Policy & Compliance Management — policy libraries, control frameworks, attestation campaigns
• Business Continuity Management (BCM) — BIA, business continuity plans, DR workflows
• Operational Resilience — critical service mapping, impact analysis, DORA compliance workflows

4.2 Platform & Scripting

• ServiceNow scripting: Business Rules, Client Scripts, Script Includes, UI Policies, Flow Designer, IntegrationHub
• Scoped applications, domain separation, ACL design, and security model configuration
• CMDB / CSDM data model alignment and service mapping for risk-to-service linkage
• Performance Analytics, GRC Dashboards, Workspaces, and Employee-facing Portals
• NowAssist / GenAI integration within GRC workflows; AI-driven risk prediction configuration

4.3 Integrations

• REST, SOAP, MID Server, and IntegrationHub spokes for GRC data flows
• SIEM platforms: Splunk, Microsoft Sentinel
• Vulnerability management: Qualys, Tenable / Nessus
• ERP integration: SAP GRC, Oracle
• Identity & access management platforms (Active Directory, Okta, SailPoint)

5. CERTIFICATIONS

Status

Certification

Issuing Body

Required

CIS - Risk & Compliance (GRC)

ServiceNow

Preferred

Certified System Administrator (CSA)

ServiceNow

Preferred

Certified Technical Architect (CTA)

ServiceNow

Preferred

ServiceNow

Preferred

CRISC - Certified in Risk & Information Systems Control

ISACA

Preferred

CISA - Certified Information Systems Auditor

ISACA

Preferred

CISSP / CISM

ISC2 / ISACA

Preferred

CQI / BSI / PECB

Preferred

ITIL v4 Foundation

Axelos

6. BEHAVIOURAL COMPETENCIES

Strategic Thinking

Translates complex regulatory requirements and enterprise risk strategy into actionable ServiceNow architecture decisions

Stakeholder Influence

Engages effectively with CISO, CRO, General Counsel, and Board-level stakeholders on GRC risk posture and programme maturity

Technical Leadership

Mentors developers and consultants; sets standards, conducts reviews, and drives a culture of platform governance

Communication

Presents complex risk and compliance topics clearly for non-technical audiences; produces high-quality architecture documentation

Problem Solving

Navigates ambiguous regulatory requirements and translates them into scalable, OOTB-aligned platform solutions

Stays current on evolving regulatory landscape (DORA, EU AI Act, SEC rules) and ServiceNow IRM product roadmap