Principal ServiceNow IRM Solution Architect

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Principal ServiceNow IRM Solution Architect to join our team and shape the future of enterprise risk and compliance at scale. In this highly influential role, you will serve as the senior-most technical authority for our ServiceNow Integrated Risk Management (IRM) and Governance, Risk Compliance (GRC) ecosystem - designing forward-thinking solutions that protect the business, satisfy global regulators, and empower leadership with real-time risk intelligence.

This is more than an architecture role. You will be a strategic partner to Enterprise Risk, Global Security, Internal Audit, Legal, and Privacy leaders, a trusted mentor to a talented engineering team, and the driving force behind a multi-year vision to automate, modernize, and intelligently evolve our GRC program. From Business Continuity and Disaster Recovery planning to AI-driven risk prediction, your work will directly shape how we identify, manage, and respond to risk across the enterprise.

Responsibilities

• Enterprise IRM Architecture

  Serve as the authoritative solution architect for the ServiceNow IRM/GRC platform, leading the end-to-end design and delivery of scalable solutions across Policy Compliance Management, Risk Management, Audit Management, and Third-Party/Vendor Risk Management to align with enterprise risk strategy.

• Business Continuity Disaster Recovery Design

  Own the architectural blueprint for ServiceNow''s Business Continuity Management (BCM) and Disaster Recovery (DR) modules, ensuring deep integration between risk assessment workflows and operational recovery planning to strengthen organizational resilience.

• Strategic Technology Roadmap

  Develop and champion a multi-year GRC technology roadmap, identifying opportunities to automate, modernize, and evolve the platform including the adoption of AI and machine learning capabilities to enable predictive and proactive risk management.

• Platform Standards Governance

  Define and enforce engineering standards, configuration best practices, and governance guardrails for the ServiceNow IRM/GRC platform, ensuring long-term scalability, maintainability, upgrade readiness, and security posture.

• Regulatory Cross-Functional Alignment

  Collaborate closely with Global Security, Legal, Privacy, and Compliance stakeholders to architect technical controls that address complex regulatory requirements across jurisdictions, including GDPR, SOC 2, ISO 27001, and FedRAMP.

• Technical Leadership Mentorship

  Provide hands-on technical leadership and mentorship to senior and staff engineers within the GRC Center of Excellence (COE/POD), cultivating a high-performance culture driven by innovation, engineering rigor, and continuous improvement.

Qualifications

• 12+ years of progressive experience in Cyber security GRC, Information Security, or a closely related field, including a minimum of 5 years in a senior technical architecture or platform leadership role.

• Deep, hands-on expertise in ServiceNow IRM/GRC modules (Policy Compliance, Risk Management, Audit Management, Vendor Risk) and the ServiceNow BCM application suite.

• Demonstrated success of architecting and delivering enterprise-scale GRC solutions integrated with complex, multi-cloud ecosystems (e.g., Workday, Azure, AWS, Okta).

• Extensive experience designing and automating Business Continuity Management (BCM) and Disaster Recovery (DR) programs within large, globally distributed enterprises.

• Comprehensive understanding of global risk and compliance frameworks, including NIST CSF, ISO 27001, SOC 2, GDPR, and FedRAMP.