ServiceNow GRC, Audit & Controls Solution Architect

Women AI Labs; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Women AI Labs is seeking a Senior GRC Architect to design enterprise governance, risk, and compliance solutions using ServiceNow IRM. You will connect regulatory obligations to policies, controls, evidence, testing, findings, remediation, and executive reporting.

The role requires 8+ years in GRC or related fields, deep knowledge of control frameworks, and hands-on ServiceNow IRM experience. You will lead architecture reviews, design continuous monitoring, and establish attestation models across

Qualifications

• GRC domain knowledge across governance, risk, controls and audit.
• Hands-on experience with ServiceNow IRM or GRC platforms.
• Experience mapping regulatory obligations to policies and controls.
• Proficient in evidence collection and control testing workflows.
• Strong understanding of security, privacy, and data protection.

Responsibilities

• Architect enterprise GRC solutions and reference architectures.
• Design regulatory hierarchies and control-objective structures.
• Set up authority documents, citations, policies, and controls.
• Design continuous-control monitoring and evidence collection workflows.
• Define audit and testing workflows; manage findings and remediation.
• Architect internal and external audit processes and engagements.
• Configure audit tasks, findings, and remediation activities.
• Establish ownership and attestation models for governance programs.
• Design secure repositories for audit evidence and data.
• Integrate GRC with finance, security, HR, assets and CMDB data.
• Support SOX and other regulatory programs; prepare executive dashboards.

Skills

GRC architecture

Audit technology

ServiceNow IRM

Regulatory compliance

Evidence automation

Continuous monitoring

Security and privacy

SOX compliance

Tools

ServiceNow IRM

Job description

Design enterprise governance, risk, compliance, control, evidence, and audit solutions using ServiceNow IRM, connecting regulatory obligations to policies, controls, evidence, testing, findings, remediation, and executive reporting.

What you'll do

• Architect enterprise GRC solutions
• Design regulatory and compliance hierarchies
• Establish authority-document, citation, policy, control-objective, and control structures
• Design continuous-control monitoring
• Automate evidence collection
• Define control-testing workflows
• Architect internal and external audit processes
• Configure audit engagements, tasks, findings, issues, and remediation
• Establish ownership and attestation models
• Design secure audit evidence repositories
• Integrate GRC with financial, security, HR, asset, and CMDB data
• Support SOX and other regulatory programs
• Establish executive reporting and compliance dashboards
• Maintain traceability from regulation to remediation
• Design role-based security for sensitive information
• Lead architecture and design-governance reviews

Required qualifications

• 8+ years in GRC, audit technology, enterprise architecture, or ServiceNow
• 4+ years of ServiceNow IRM or GRC experience
• Strong control-framework knowledge
• Strong audit and compliance process expertise
• Experience with evidence automation and continuous monitoring
• Strong understanding of security and privacy

Preferred certifications

• ServiceNow CSA
• CIS Risk and Compliance
• CISA
• CRISC
• CISSP
• CIA or CPA advantageous
• CTA preferred for lead-level candidates