Job Type: Full-time

Job Title: ServiceNow GRC / IRM / VR / SIR Architect (In office)Experience: 8+ YearsLocation: KSAWork Mode: [Saudi - On-site]Employment Type: Full-TimeAbout the RoleWe are seeking a highly experiencedServiceNow GRC / IRM / VR / SIR Architectto lead the architecture, design, implementation, and optimization of enterprise-wideGovernance, Risk, Compliance, Vulnerability Management, and Security Incident Responsesolutions on the ServiceNow platform.The ideal candidate will bring strong expertise acrossServiceNow Integrated Risk Management (IRM/GRC), Vendor Risk Management (VRM), Vulnerability Response (VR), and Security Incident Response (SIR) , combined with excellent ServiceNow platform architecture, integration, and stakeholder-management skills.This role will work closely withRisk, Compliance, Internal Audit, Cybersecurity, Information Security, IT, Procurement, and business leadershipto deliver scalable and automated solutions aligned with enterprise and regulatory requirements.Key ResponsibilitiesServiceNow ArchitectureLead end-to-endsolution and technical architecturefor ServiceNow GRC/IRM, VRM, VR, and SIR.Define architecture standards, technical roadmap, data models, integration patterns, security, and governance.Conduct architecture and requirements workshops with business and technical stakeholders.Translate complex business, cybersecurity, risk, compliance, and regulatory requirements into scalable ServiceNow solutions.Review existing implementations and recommend optimization, automation, modernization, and standardization opportunities.Provide technical leadership to ServiceNow developers, administrators, integration teams, and implementation partners.GRC / Integrated Risk ManagementDesign and implementRisk Management, Policy & Compliance, Audit Management, Regulatory Change, Control Management, Assessments, Issues, and Remediationsolutions.Design risk frameworks, risk statements, controls, indicators,



assessments, attestations, issues, and remediation processes.Develop automated workflows for risk identification, assessment, treatment, monitoring, and reporting.Support regulatory and industry frameworks such asSOX, NIST, ISO 27001, PCI DSS, SOC 2, GDPR , and other applicable standards.Improve enterprise risk visibility through dashboards, reporting, metrics, and automation.Vendor / Third-Party Risk ManagementArchitectVendor Risk Management (VRM)and third-party risk solutions.Design vendor onboarding, due diligence, inherent risk assessments, questionnaires, control assessments, remediation, and ongoing monitoring.Integrate vendor risk processes with procurement, vendor management, cybersecurity, and enterprise risk functions.Vulnerability ResponseArchitect and optimizeServiceNow Vulnerability Response (VR)solutions.Design vulnerability ingestion, normalization, prioritization, assignment, remediation, exception, and closure processes.Integrate vulnerability management platforms with ServiceNow.Develop risk-based vulnerability prioritization usingasset criticality, business impact, severity, exploitability, and threat intelligence .Integrate Vulnerability Response withCMDB, ITSM, SIR, and Security Operations .Security Incident ResponseDesign and implementServiceNow Security Incident Response (SIR)solutions.Develop security incident workflows covering identification, enrichment, prioritization, investigation, containment, remediation, and closure.Integrate ServiceNow withSIEM, SOAR, EDR, threat intelligence,



vulnerability management, and other cybersecurity platforms .Establish automation and orchestration to improve security incident response and operational efficiency.Integration & Technical SkillsStrong experience withREST/SOAP APIs, IntegrationHub, MID Server, Import Sets, Transform Maps, web services, and scripted integrations .Experience integrating ServiceNow with enterprise and security platforms includingSIEM, EDR, vulnerability scanners, CMDB, ITSM, IAM, procurement, and GRC systems .Robust knowledge of ServiceNow platform capabilities including:Flow DesignerBusiness RulesScript IncludesClient ScriptsUI PoliciesACLsRoles & GroupsNotificationsReporting & DashboardsStrongJavaScript / ServiceNow scriptingskills.Understanding of ServiceNow security, performance, upgrades, application lifecycle management, and platform governance.Required Experience8+ years of overall ServiceNow experiencewith significant architecture experience.5+ years of experience in ServiceNow GRC/IRM and/or SecOps .Strong hands-on experience withIRM/GRC, VRM, Vulnerability Response, and Security Incident Response .Proven experience leading complex, enterprise-scale ServiceNow implementations.Strong understanding ofenterprise risk, compliance, audit, cybersecurity, vulnerability management, and security incident processes .Experience working with global stakeholders and distributed delivery teams.Excellent communication, presentation, problem-solving, and stakeholder-management skills.Preferred CertificationsServiceNow Certified System Administrator ( CSA )ServiceNow Certified Application Developer ( CAD )ServiceNowIRM/GRC Implementation SpecialistServiceNowSecurity Operations / Vulnerability Response certificationsServiceNowCertified Technical Architect (CTA)– highly desirableCISA, CISM, CISSP, CRISCor equivalent cybersecurity/risk certification – preferred

📌 ServiceNow GRC / IRM / VR / SIR Architect (On-site) (Mumbai)
🏢 AvanteNow
📍 Mumbai