{"id":2883400,"url":"https://alion.io/job/itech-ag-servicenow-irm-practice-lead","title":"ServiceNow IRM Practice Lead","company":{"id":4448676,"name":"iTech AG","domain":"itechag.com","url":"https://alion.io/company/itech-ag","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Enterprise Apps","role_family":"Enterprise Apps","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"FedRAMP","optional":false},{"name":"ITSM","optional":false},{"name":"JavaScript","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOAP","optional":false}],"status":"live","first_seen_at":"2026-10-19T22:09:54Z","employer_posted_date":null,"last_verified_at":"2026-10-19T22:09:54Z","board_verified":false,"closed_at":null,"days_open":11,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":11},"description":"OVERVIEWiTech AG is seeking an SecOps Practice Lead – ServiceNow Architect to lead the solution architecture for a federal customer's cyber risk and Continuous Authorization and Monitoring (CAM) program. This is a senior, architect-level role responsible for owning the end-to-end IRM solution design on the ServiceNow platform and the integration architecture that connects it across multiple ServiceNow products — IRM/CAM, Policy and Compliance Management, Risk Management, Flow Designer and Workflow Studio, IntegrationHub, Service Portal/UI Builder, Virtual Agent, and AI/Now Assist.\nThe ideal candidate is a true ServiceNow architect who has implemented IRM end-to-end, from control library and authorization boundary design through SSP management, POA&M and issue remediation, control testing, risk registers, dashboards, and data migration, and can direct developers to deliver it. They bring proven experience architecting cross-product ServiceNow solutions and enterprise integrations in FISMA/FedRAMP-governed environments. This role owns the IRM Technical Solutions, defines integration and security patterns, and collaborates with the iTech Solution SMEs, customers, and iTech Certified Master Architects.\nROLES AND RESPONSIBILITIES\n\nOwn delivery quality: Bring hands-on technical and business expertise, guide the team, and step in when work goes off track.\n\nBuild the practice: Develop the offering and expertise, find and help recruit developers, and support their growth.\n\nHelp grow the business: Support pre-sales and co-selling, build relationships with BD and relevant ServiceNow contacts, and help turn opportunities into work.\n\nStay cost-recoverable while creating room to lead: Do customer work, but also devote time to practice development rather than treating it as an after-hours job\n\n• Advise and sell to CISOs, CIOs, and security leaders—connecting their risk priorities to credible IRM and SecOps solutions.\n• Build the SecOps practice through market-facing offerings, repeatable takeout plays, pre-sales leadership, and team mentoring.\n• Guide customers on how ServiceNow and Armis fit together, while remaining hands-on through delivery.\n\nOwn the end-to-end solution architecture for the ServiceNow IRM/CAM solution, including solution design, data model, control hierarchy, and the phased roadmap across modules\n\nArchitect and lead the implementation of ServiceNow IRM capabilities across the solution, including:\nContinuous Authorization and Monitoring (CAM)\n\nSystem Security Plans (SSPs) and Authorization Boundaries\n\nControl Testing, Assessment, and Continuous Monitoring\n\nIssue, Deficiency, and POA&M Management\n\nCyber Risk Register and Risk Assessments\n\nCommon and Inherited Controls\n\nPolicy and Compliance Management (authority documents, policies, and control attestations)\n\nAudit Management and auditor evidence workflows\n\nThird-Party / Vendor Risk Management\n\nBusiness Continuity Management and contingency planning (CP control family)\n\nDashboards, Reporting, and Stakeholder Visibility\n\nAuthor and maintain the Technical Solution — architecture diagrams, data model, control hierarchy, integration patterns, and security model — and drive architecture decisions and approvals each sprint\n\nConfigure IRM Continuous Authorization and Monitoring (CAM) for SSPs, POA&Ms, control testing, risk assessments, and control inheritance\n\nBuild automated issue and deficiency workflows, including assignment, notifications, tracking, review, and approval\n\nConfigure collaborative workflows to replace email-based processes across multiple security and technical teams\n\nDesign support for multiple authorization boundaries and SSPs, including GSS, ICS, and subsystem relationships\n\nConfigure common controls and inherited controls so control relationships cascade appropriately across parent systems and subsystems\n\nImplement a cyber risk register and the workflows for creating, reviewing, and approving risk assessments\n\nBuild configurable dashboards and reports for issues, remediation status, SSP and control status, risks, and approvals that end users can adjust without recoding\n\nConfigure the annual SSP update and approval process, including auditor review and sign-off requirements\n\nEnsure the control library supports the required NIST control and enhancement granularity — potentially down to examples such as AC-2(1)(b) — and design a documented workaround if native depth is insufficient\n\nPlan and execute the IRM data migration effort, including:\nMigration of approximately 10–14 SSPs, using OSCAL where feasible\n\nAn alternate JSON/import-map transformation approach where OSCAL is not viable\n\nA practical manual, system-by-system configuration fallback if automation is not possible\n\nValidation of migrated control, POA&M, and boundary data against source systems\n\nDefine and govern the integration architecture between ServiceNow IRM and external systems, including authoritative control and compliance data sources, customer SSO, ITSM/ticketing, and enterprise reporting or data warehouse platforms\n\nIdentify how digital approvals and signatures will be handled on the current platform, including an interim workflow if native signature capability is unavailable\n\nEstablish development standards and hands-on build the most complex components — custom applications, workflows, business rules, UI policies, integrations, and Flow Designer automations\n\nPartner with iTech AG Master Architects and the Solution SME on cross-product architecture and technical governance\n\nServe as a contributing member of the iTech AG ServiceNow Center of Excellence (CoE), sharing reusable patterns, standards, and lessons learned across programs\n\nAct as the organization-wide leader for the IRM product area — advising other programs and pursuits, informing the IRM capability roadmap, and supporting proposal and solutioning efforts beyond this project\n\nLead the approximately four-week discovery with security stakeholders to validate processes, data sources, control hierarchy, and migration assumptions\n\nParticipate in Agile ceremonies including sprint planning, backlog refinement, demos, and retrospectives, and contribute to Technical Solution Document (TSD) updates each sprint\n\nLead code and design reviews, mentor developers, and enforce platform best practices and technical governance\n\nSupport platform upgrades, patching, and performance optimization activities, and resolve IRM defects, workflow issues, and production support requests\n\nEnsure configurations and customizations align with federal security, compliance (e.g., NIST 800-53, FISMA, FedRAMP), accessibility, and data governance requirements\n\nContribute to technical documentation, knowledge transfer, operational readiness, and end-user adoption efforts\n\nOther duties as assigned\n\nMINIMUM QUALIFICATIONS\n5+ years of hands-on ServiceNow experience, including 3+ years in a technical lead role\n\n3+ years leading ServiceNow Integrated Risk Management (IRM) implementations end-to-end\n\nDeep architecture and hands-on experience across:\n\nContinuous Authorization and Monitoring (CAM) and SSP management\n\nControl libraries, control testing, and continuous control monitoring\n\nIssue, deficiency, and POA&M remediation workflows\n\nCyber risk register and risk assessment workflows\n\nDashboards, reporting, and stakeholder self-service\n\nWorking knowledge of NIST 800-53 control families and enhancements, FISMA, and the authorization boundary / ATO lifecycle\n\nExperience designing integration architecture using IntegrationHub and REST/SOAP APIs, and leading GRC/IRM data migration\n\nStrong experience defining ServiceNow data models, security models, and overall platform architecture\n\nProficiency with ServiceNow scripting including JavaScript, Glide APIs, Script Includes, and Flow Designer\n\nExperience working in Agile delivery environments (ServiceNow Now Create methodology a plus)\n\nStrong analytical, troubleshooting, and problem-solving skills, and experience leading, mentoring, and setting technical direction for developers\n\nEDUCATION AND CERTIFICATIONS\nBachelor’s degree or equivalent years experience\n\nServiceNow Certified System Administrator (CSA) or equivalent years experience\n\nServiceNow Certified Application Developer (CAD) or equivalent years experience\n\nServiceNow Certified Implementation Specialist (CIS) – Risk and Compliance (IRM), with additional CIS certifications across products (e.g., Data Foundations (CMDB/CSDM), ITSM, CSM, Discovery) a plus\n\nPREFERRED QUALIFICATIONS\nExperience supporting federal government programs subject to FISMA and/or FedRAMP authorization\n\nExperience with OSCAL-based SSP export/import and control data transformation\n\nExperience migrating from eMASS, Xacta, CSAM, or comparable GRC/ATO platforms into ServiceNow\n\nFamiliarity with continuous control monitoring, automated evidence collection, and control test automation\n\nExperience implementing ServiceNow Policy and Compliance Management, Risk Management, Audit Management, or Vendor Risk Management\n\nExperience implementing ServiceNow Business Continuity Management, Privacy Management, or Operational Resilience Management\n\nExperience linking ServiceNow Security Operations (Vulnerability Response, Configuration Compliance) findings to IRM issues and POA&Ms\n\nFamiliarity with Now Assist for IRM, including AI-assisted control mapping and evidence summarization\n\nStrong experience with Service Portal, UI Builder, and dashboard and reporting design for executive and auditor audiences\n\nFamiliarity with ServiceNow data model, CMDB relationships, and platform performance optimization\n\nExperience with ServiceNow Now Create methodology and IntegrationHub-based integrations\n\nFamiliarity with ServiceNow Virtual Agent and AI / Now Assist capabilities\n\nStrong communication, stakeholder engagement, and collaboration skills\n\nSECURITY CLEARANCE\nAbility to obtain and maintain a Public Trust\n\nPursuant to government contracts, US Citizenship is required\n\niTech AG is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, genetic information, disability, protected veteran status, or any other characteristics protected by federal, state, or local laws.\niTech AG is committed to working with and providing reasonable accommodations to individuals with disabilities. Individuals with a disability who would like to request an accommodation for any part of the employment process should email their request address the subject line as Accommodation Request and include your name, contact information, and a description of your accommodation request.\nOriginally posted on Himalayas","description_format":"text","description_chars":10687,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Technology","Professional Services"],"lifecycle":[{"event":"open","at":"2026-10-19T23:28:00Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.841,"p_room":0.9,"age_days":10,"expected_fill_days":28,"reasons":["seen:10","velocity","win:mid"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/itech-ag-servicenow-irm-practice-lead","json_url":"https://alion.io/job/itech-ag-servicenow-irm-practice-lead.json","meta":{"generated_at":"2026-10-31T02:23:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3362,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4448676},"rest":"https://alion.io/mcp/rest/get_company?id=4448676"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fitech-ag-servicenow-irm-practice-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fitech-ag-servicenow-irm-practice-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fitech-ag-servicenow-irm-practice-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/itech-ag-servicenow-irm-practice-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fitech-ag-servicenow-irm-practice-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2883400}},{"tool":"search_jobs","arguments":{"company":"itechag.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2883400},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}