Description

Key Skills: ServiceNow, Risk Management, Architect, Workflow

Roles and Responsibilities:

1. Architecture and Solution Design

•  
  • Define end-to-end Third-Party Risk Management (TPRM) architecture using ServiceNow Integrated Risk Management (IRM).
  • Design scalable and reusable solutions for:
    • Vendor onboarding and due diligence.
    • Inherent and residual risk assessments.
    • Continuous risk monitoring and periodic reassessments.
  • Prepare High-Level Design (HLD) and Low-Level Design (LLD) documents.
  • Ensure alignment with enterprise architecture standards and best practices.

2. Vendor Risk Lifecycle Architecture

•  
  • Design and standardize vendor onboarding workflows and due diligence processes.
  • Define vendor risk-tiering models, including Critical, High, Medium, and Low.
  • Architect the complete risk assessment lifecycle, including initial assessments and periodic reviews.
  • Implement automated reassessment triggers based on risk changes, assessment schedules, incidents, and regulatory requirements.
  • Define vendor segmentation criteria based on data sensitivity, business criticality, and regulatory impact.

3. Risk and Compliance Framework Design

•  
  • Architect and implement risk registers, control frameworks, policy management, and compliance processes.
  • Align control frameworks with ISO 27001, NIST, and SOC 2 requirements.
  • Define risk-scoring methodologies, control effectiveness models, and risk treatment strategies.
  • Ensure alignment with applicable regulatory and privacy requirements, including GDPR and HIPAA, where relevant.
  • Establish traceability between risks, controls, policies, assessments, and compliance obligations.

4. Integration Architecture

•  
  • Design integrations between ServiceNow IRM/TPRM and third-party risk platforms, procurement systems, and enterprise applications.
  • Implement integrations using REST and SOAP APIs, IntegrationHub, Import Sets, and MID Server architecture where appropriate.
  • Define integration patterns, data mappings, error handling, reconciliation, and monitoring.
  • Ensure secure and reliable data exchange across integrated systems.

5. Data Governance and Security

•  
  • Define data models for vendor, risk, assessment, control, and related entities.
  • Establish role-based access control, Access Control Lists (ACLs), and appropriate user roles.
  • Implement data segregation, privacy controls, and secure handling of sensitive vendor information.
  • Ensure compliance with enterprise data governance and security standards.
  • Apply least-privilege access principles and maintain appropriate audit trails.

6. Reporting and Analytics Strategy

•  
  • Design dashboards to monitor vendor risk posture, compliance status, assessment completion, and emerging risk trends.
  • Implement Performance Analytics indicators, KPIs, and operational metrics.
  • Develop reports that provide actionable insights for the CISO, risk leadership, compliance teams, and procurement stakeholders.
  • Enable visibility into overdue assessments, high-risk vendors, control gaps, and remediation progress.

7. Stakeholder Management

•  
  • Collaborate with CISOs, risk officers, compliance teams, procurement teams, and information security stakeholders.
  • Translate business requirements into technical architecture and implementable solution designs.
  • Lead requirement-gathering workshops, architecture reviews, and solution design sessions.
  • Provide technical guidance to development and implementation teams.
  • Ensure alignment between business objectives, risk management processes, and ServiceNow platform capabilities.

Skills Required:

ServiceNow Expertise

•  
  • Strong experience with ServiceNow IRM, GRC, and Third-Party Risk Management (TPRM).
  • Knowledge of risk management, policy and compliance, vendor risk assessments, and control management.
  • Experience designing ServiceNow workflows, business rules, automation, and reusable platform solutions.

Risk Management and Architecture

•  
  • Strong understanding of third-party risk management principles and vendor risk lifecycle processes.
  • Experience in enterprise architecture, solution architecture, and technical design.
  • Ability to develop HLDs, LLDs, architecture diagrams, and technical specifications.
  • Knowledge of risk scoring, control effectiveness, risk treatment, and compliance frameworks.

Integration Skills

•  
  • Hands-on experience with REST and SOAP APIs.
  • Knowledge of MID Server architecture and secure integration patterns.
  • Experience with Import Sets, Transform Maps, IntegrationHub, and data synchronization.
  • Ability to design scalable, reliable, and secure integrations with external systems.

Data Governance and Security

•  
  • Experience with ServiceNow data models, ACLs, roles, and access control strategies.
  • Understanding of data privacy, data segregation, and governance principles.
  • Familiarity with GDPR, HIPAA, and other relevant regulatory requirements.

Reporting and Analytics

•  
  • Experience designing ServiceNow dashboards, reports, and Performance Analytics indicators.
  • Ability to define KPIs and metrics for vendor risk, compliance, and assessment performance.

Preferred Qualifications

•  
  • ServiceNow certifications relevant to IRM, Risk and Compliance, or TPRM.
  • Certified Implementation Specialist - Risk & Compliance (CIS-RC), where applicable to the candidate's certification portfolio.
  • Experience leading ServiceNow IRM/TPRM implementations in an enterprise environment.
  • Strong communication, stakeholder management, analytical, and problem-solving skills.

Education:  Bachelor's Degree/ Master's Degree in related field

Key Skills

Education

Any Graduate