ESM Architect

ServiceNow Technical Architect - IRM, SecOps & BCM • Define IRM data model (entities: risks, controls, issues, policies, obligations, third-party risk, regulatory framework of (SAMA / NCA / ITGF / BCM) • Map risk taxonomy, control library, control objectives, and obligation → control coverage • Align to CSDM for service-centric risk and control scoping • Design & build - Policy lifecycle, risk assessment frameworks (qualitative/quantitative), control testing, issues/remediation, attestations • Continuous compliance design (evidence automation, sampling rules, control indicators/KRIs) • Architecture & Design for SIEM/EDR/SOAR integrations • Data model for BIA, critical processes/services, MTPD/RTO/RPO, dependencies (apps, locations, vendors, people) • Link BCM to CMDB Business/Application Services for resilience-by-design • Hands-on development, design expertise