ServiceNow IRM Practice Lead

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Take ownership of the complete solution architecture for the ServiceNow IRM/CAM solution, covering solution design, data models, control hierarchies, and a phased roadmap.

• Design and oversee the implementation of CAM, SSPs, authorization boundaries, control testing, continuous monitoring, issue/deficiency/POA&M management, cyber risk registers, policy and compliance, audits, vendor risk, business continuity, dashboards, and reporting.

• Create and maintain architecture diagrams, data models, control hierarchies, integration patterns, and security models.

• Configure CAM for SSPs, POA&Ms, control testing, risk assessments, and control inheritance.

• Develop automated workflows for issues and deficiencies, along with collaborative workflows to replace email-based processes.

• Design support for various authorization boundaries and SSPs, including GSS, ICS, and subsystem relationships.

• Set up common and inherited controls, cyber risk registers, risk assessment workflows, dashboards, reports, and annual SSP updates.

• Ensure detailed documentation of NIST control and enhancement granularity, including workarounds where necessary.

• Plan and carry out the migration of approximately 10–14 SSPs using OSCAL, JSON/import-map transformations, or manual fallback methods; validate migrated data.

• Define and manage integrations with authoritative control/compliance sources, SSO, ITSM/ticketing, reporting, and data warehouse platforms.

• Establish digital approval and signature handling processes, incorporating interim workflows if required.

• Set development standards and actively build complex applications, workflows, business rules, UI policies, integrations, and automations using Flow Designer.

• Collaborate with Master Architects and Solution SMEs on cross-product architecture and governance initiatives.

• Contribute reusable patterns, standards, and lessons learned to the ServiceNow Center of Excellence.

• Lead the direction of IRM capabilities, provide advice for programs and pursuits, and assist in proposal and solutioning activities.

• Conduct approximately four-week discovery sessions with security stakeholders.

• Engage in Agile ceremonies and update Technical Solution Documents during each sprint.

• Lead code and design reviews, mentor developers, and uphold best practices.

• Provide support for upgrades, patching, performance optimization, defect resolution, workflow issues, and production support.

• Ensure compliance with federal security, accessibility, and data governance requirements.

• Assist in documentation, knowledge transfer, operational readiness, and end-user adoption.

⛳️ Requirements

• Over 5 years of hands-on experience with ServiceNow, including more than 3 years in a technical lead position.

• At least 3 years of experience leading end-to-end ServiceNow Integrated Risk Management (IRM) implementations.

• Extensive architecture and hands-on experience with CAM and SSP management.

• Proficient in control libraries, control testing, continuous control monitoring, issue/deficiency/POA&M remediation, cyber risk registers, risk assessments, dashboards, reporting, and stakeholder self-service.

• Familiarity with NIST 800-53 control families and enhancements, FISMA, and the authorization boundary/ATO lifecycle.

• Experience in designing integration architecture using IntegrationHub and REST/SOAP APIs, as well as leading GRC/IRM data migrations.

• Strong background in defining ServiceNow data models, security models, and platform architecture.

• Proficient in JavaScript, Glide APIs, Script Includes, and Flow Designer.

• Experience in Agile delivery environments; familiarity with the ServiceNow Now Create methodology is a plus.

• Excellent analytical, troubleshooting, and problem-solving abilities.

• Experience in leading, mentoring, and establishing technical direction for developers.

• Bachelor’s degree or equivalent professional experience.

• ServiceNow Certified System Administrator (CSA) or equivalent experience.

• ServiceNow Certified Application Developer (CAD) or equivalent experience.

• ServiceNow Certified Implementation Specialist (CIS) in Risk and Compliance (IRM).

• Ability to obtain and maintain a Public Trust clearance.

• Must be a US Citizen.

🏝️ Benefits

• Equal Opportunity Employer

• Reasonable accommodations for individuals with disabilities