Position Summary
The ServiceNow Risk & Compliance Architect / Engineer is responsible for designing, developing, implementing, and optimizing ServiceNow Integrated Risk Management (IRM) and Governance, Risk, and Compliance (GRC) solutions within a healthcare environment.
This role will lead the technical architecture and engineering of enterprise risk, regulatory compliance, audit, policy management, and third-party risk capabilities. The individual will partner with Information Security, Privacy, Compliance, Internal Audit, and IT leadership to automate risk and compliance processes, strengthen security controls, and support healthcare regulatory requirements.
The ideal candidate combines strong ServiceNow architecture and development expertise with hands-on experience in healthcare risk management, cybersecurity, and regulatory compliance.
Key Responsibilities- Architect, design, and implement ServiceNow IRM/GRC solutions aligned with enterprise risk and compliance objectives.
- Configure and enhance ServiceNow Risk Management, Policy and Compliance Management, Audit Management, and Third-Party Risk Management capabilities.
- Translate healthcare regulatory and security requirements into automated workflows, controls, assessments, and compliance processes.
- Develop risk assessment, control testing, remediation, policy attestation, audit evidence, and reporting capabilities.
- Support healthcare compliance requirements, including HIPAA, HITECH, HITRUST, NIST, and applicable CMS requirements.
- Integrate ServiceNow with enterprise IT, security, identity management, vulnerability management, CMDB, and other healthcare systems.
- Perform hands-on ServiceNow development using JavaScript, Business Rules, Script Includes, Flow Designer, IntegrationHub, and REST/SOAP APIs.
- Establish platform architecture standards, technical governance, security controls, and development best practices.
- Collaborate with cybersecurity, privacy, compliance, audit, and clinical technology stakeholders to identify and mitigate enterprise risks.
- Develop dashboards and reporting to provide visibility into risk exposure, compliance posture, control effectiveness, and remediation progress.
Required Qualifications- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field, or equivalent experience.
- 5+ years of hands-on ServiceNow platform experience.
- Experience architecting and implementing ServiceNow IRM/GRC solutions.
- Strong knowledge of ServiceNow platform architecture, configuration, scripting, workflows, integrations, and reporting.
- Experience with ServiceNow Risk Management, Policy and Compliance Management, Audit Management, and Third-Party Risk Management.
- Working knowledge of healthcare regulatory requirements, including HIPAA, HITECH, and HITRUST.
- Understanding of NIST, cybersecurity risk management, IT controls, audit processes, and compliance frameworks.
- Experience integrating ServiceNow with enterprise IT and security platforms.
- Strong communication, problem-solving, and stakeholder management skills.
#LI-RS1