OPEN: ServiceNow – Architect

Job Overview

• The ServiceNow Architect is responsible for the architecture, design, implementation, and continuous improvement of ServiceNow capabilities focused on Security Incident Response (SIR), Vulnerability Response (VR), and Integrated Risk Management (IRM).
• This role will provide technical and functional leadership to ensure scalable, secure, and sustainable solutions that align with enterprise governance, cybersecurity, risk, and compliance requirements.
• The successful candidate will work closely with Cybersecurity, Risk, Compliance, IT Operations, and delivery teams to define target-state architecture, guide implementations, and drive platform best practices across the ServiceNow ecosystem.
• Lead the end-to-end architecture, solution design, and implementation of ServiceNow SIR, VR, and IRM modules.
• Define scalable and supportable architecture patterns, data models, workflows, integrations, and governance controls for security and risk use cases.
• Collaborate with business stakeholders, cybersecurity teams, risk teams, compliance teams, and technical teams to translate requirements into solution designs.
• Provide architectural guidance for incident response workflows, vulnerability lifecycle processes, risk management frameworks, issue remediation, exceptions management, and policy/compliance processes.
• Establish and maintain platform design standards, guardrails, and best practices to ensure consistency, performance, scalability, and maintainability.
• Design and oversee integrations between ServiceNow and upstream/downstream tools such as security tools, vulnerability scanners, SIEM/SOAR platforms, CMDB, asset systems, and enterprise applications.
• Support roadmap planning and recommend improvements to mature security and risk processes enabled through ServiceNow.
• Ensure solutions align with enterprise architecture, data governance, security, audit, and operational support requirements.
• Provide technical leadership during implementation projects, enhancements, upgrades, and operational sustainment activities.
• Review and approve detailed solution designs, technical configurations, integration patterns, and data flows delivered by developers or implementation partners.
• Support testing strategy, deployment planning, release governance, and transition to operations.
• Drive continuous improvement by identifying opportunities to improve automation, reporting, user experience, process efficiency, and control effectiveness.

Architecture & Solution Design

• Develop target-state and transition-state architecture for ServiceNow SIR, VR, and IRM capabilities.
• Create solution designs for workflows, data models, forms, portals, dashboards, notifications, business rules, integrations, and role-based access.
• Define patterns for risk registers, issues, controls, policy exceptions, remediation tracking, and vulnerability response orchestration.
• Ensure appropriate use of CMDB, CI relationships, asset data, and service context to support security and risk use cases.

Process Design & Implementation

Design and optimize processes for:

• Security incident intake, triage, investigation, containment, and remediation
• Vulnerability identification, prioritization, assignment, remediation, and exception management
• Risk identification,

Qualifications

ServiceNow Platform & Architecture

• Minimum of 3 years of hands on experiences with SIR/VR/IRM , guiding and reviewing vendor implementations
• Strong understanding of ServiceNow platform architecture, data model, and application framework
• Experience designing scalable solutions across SIR (Security Incident Response), VR (Vulnerability Response), and IRM
• Ability to define end-to-end solution architecture (workflows, forms, integrations, reporting)

Security & Risk Domain Knowledge – Deep understanding of:

• Security incident lifecycle (triage containment resolution)
• Vulnerability management lifecycle (identify prioritize remediate exception handling)
• Risk management concepts (risk register, controls, issues, policy/compliance)
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) is a strong asset

Process Design & Implementation – Experience designing and optimizing:

• Incident response workflows
• Vulnerability remediation processes
• Risk and compliance processes
• Strong alignment to ITIL and risk governance best practices
• Integration & Data Management

Hands-on experience with:

• REST APIs, web services, and integrations
• Data ingestion, normalization, and reconciliation
• Integrating with tools such as vulnerability scanners, SIEM/SOAR, CMDB, and asset systems

CPUS Engineering employs artificial intelligence (AI) tools as part of its recruitment process to enhance efficiency and consistency. These tools may assist with activities such as application screening, candidate evaluation, and summarization of interview feedback.

AI-generated outputs are intended to supplement, not replace, human judgment. All final hiring decisions are made by qualified human decision-makers who exercise professional discretion in reviewing and assessing candidate information alongside any AI-generated insights.

CPUS Engineering ensures that the use of AI in recruitment complies with all applicable employment laws, human rights legislation, and privacy regulations. The organization is committed to maintaining fairness, transparency, and non-discrimination throughout the hiring process.