Lead Specialist, ServiceNow GRC Solution Architect, Deloitte Global Technology
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Hybrid
- Seniority
- Lead
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Certified ServiceNow Administrator (CSA)
- Certified Implementation Specialist – Risk and Compliance (CIS-RC), or the current equivalent certification for ServiceNow Integrated Risk Management.
- Excellent written and verbal communication, interpersonal and presentation skills, with the ability to explain complex risk, compliance and technical concepts to both technical and non-technical audie
- 5+ years of ServiceNow experience in solution or technical architecture roles, including substantial hands-on architecture experience with Risk and Compliance / Integrated Risk Management.
- A proven track record of leading end-to-end ServiceNow IRM solution designs and delivering complex, enterprise-scale implementations.
- Deep knowledge of ServiceNow Risk Management and Policy and Compliance Management, including the relationships between entities, authority documents, citations, policies, control objectives, controls,
- Experience designing risk frameworks, assessment methodologies, inherent and residual risk scoring, risk appetite and tolerance, control testing, continuous monitoring and compliance reporting.
- Experience mapping regulatory obligations and internal policies to controls and designing traceable evidence, exception and remediation processes.
- Strong understanding of ServiceNow platform architecture, data model, security model, workspaces, reporting, workflow automation and upgrade-safe design practices.
- Experience integrating IRM with relevant enterprise systems and data sources using APIs, Integration Hub or other appropriate integration technologies.
- Working knowledge of ServiceNow scripting, including JavaScript and Glide Record, sufficient to assess technical feasibility and assure solution quality.
- Experience working with Agile and Waterfall delivery approaches and participating across the full software development lifecycle.
- Solid understanding of IT governance, architecture governance, data security and privacy, change and release management, testing and audit requirements.
Full description
##
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
What will your typical day look like?Work you'll doSummary:
The Global ServiceNow Center of Excellence is seeking a highly skilled and experienced ServiceNow Risk and Governance Risk Compliance Solutions Architect (GRC) to lead the architecture of enterprise solutions across ServiceNow, with particular emphasis on Risk Management and Policy and Compliance Management. The ideal candidate will combine deep ServiceNow platform expertise with practical knowledge of governance, risk, controls, audit and regulatory compliance processes. This role requires strong architecture leadership, excellent written and verbal communication skills, and the ability to work effectively with risk, compliance, audit, security, technology and business stakeholders. The successful candidate will translate business and regulatory requirements into scalable technical designs, guide implementations through architectural governance, and ensure solutions make effective use of out-of-the-box IRM capabilities, integrations, automation and reporting.
Responsibilities:
- Lead the architecture, design and implementation of ServiceNow Integrated Risk Management solutions, with primary focus on Risk Management and Policy and Compliance Management.
- Partner with risk, compliance, audit, security, legal and business stakeholders to understand obligations, operating models and business outcomes, and translate them into robust solution designs.
- Define architectures covering authority documents, citations, policies, control objectives, controls, entities, risk statements, assessments, indicators, attestations, issues, remediation tasks and supporting workflows.
- Design traceable and reusable relationships between regulatory obligations, policies, risks, controls, evidence, findings and remediation activity.
- Develop and maintain architectural views, data models, integration designs, decision records, configuration standards and detailed technical specifications.
- Promote configuration-first, upgrade-safe use of out-of-the-box ServiceNow IRM capabilities and challenge unnecessary customization.
- Provide technical leadership to delivery teams and review configurations, extensions and code for security, quality, performance and maintainability.
- Architect integrations between ServiceNow IRM and enterprise systems, regulatory content providers, data sources and evidence repositories using appropriate APIs and integration technologies.
- Enable automated assessments, continuous control monitoring, risk indicators, attestations and evidence collection wherever appropriate.