GRC Process Architect

About the Role

The GRC Process Architect will work in the Security Architecture & Engineering team in the CISO organization. This role is responsible for designing, optimizing, and documenting processes that integrate Security, IT Change Management, and GRC workflows. This role plays a critical part in maturing the organization’s compliance posture by enabling automated traceability between IT changes, affected environments, and required updates to compliance and security controls.

The role will require:
(1) Working with Information Security to identify fragmented data points across existing processes and design integrated, end-to-end data flows
(2) Ability to Analyze, design and document business processes with a GRC context, with focus on traceability from Change requests to impacted environments and CMMC controls
(3) Building workflow designs that enrich and map data across ServiceNow modules, enabling consistent downstream impact analysis for security and compliance
(4) Active Collaboration with a variety of different teams within IT and IS to ensure a robust and complete solution
(5) General Knowledge of Federal Regulatory Compliance Controls such as NIST 800-53, NIST 800-171, CMMC, etc.
(6) Understanding of IT Change Management Practices

The Work

• Understand current Security processes and how they align to CMMC Controls
• Design workflows that will enrich data points for downstream processes and impact analysis
• Collaborate with IT development teams to translate process designs into technical implementation within the ServiceNow platform.
• Build and document end-to-end workflows to solve current gaps in Security and Compliance Processes
• Produce clear, comprehensive process documentation to support operational excellence, audit readiness, and automation.

What You Need

• U.S. Citizen (required).
• 5+ years of experience in business process design or process architecture.
• Working knowledge of CMMC regulatory compliance controls (NIST 800-171).
• Strong familiarity with GRC processes and successful GRC tool implementations.
• Understanding of IT Change Management practices and data governance.
• Experience working with or designing AI-enabled or automation workflows that enhance process efficiency.

Bonus If You Have

• Prior hands-on experience with ServiceNow GRC/IRM modules.
• Relevant certifications such as CPDP, CPDE, or equivalent experience.
• Experience working within an Agile delivery or development framework.
• Background supporting Information Security and Compliance teams