GRC Tool Administrator & Automation Developer
We are seeking a skilled GRC Tool Administrator & Automation Developer to join our collaborative information technology team. In this role, you will support and enhance a Web-based Governance, Risk, and Compliance (GRC) platform and contribute to its ongoing development, automation, and integration efforts. You’ll work closely with cross-functional teams to streamline security processes, implement new features, and ensure the platform effectively supports organizational compliance and risk objectives.
Key Responsibilities
- Serve as the primary administrator and developer for the organization’s GRC platform.
- Collaborate with stakeholders to understand security and compliance requirements, then design and implement automation solutions.
- Lead automation initiatives for accreditation workflows, evidence collection, control reviews, and other key security processes.
- Design and implement unified security control frameworks aligned with industry standards and integrate frameworks such as CJIS, IRS 1075, PCI, and ARC-AMPE.
- Develop and maintain Python-based API modules and automation scripts to import and update compliance controls, integrate CMDB and vulnerability data, and support continuous monitoring.
- Ingest structured data (JSON, CSV) into the GRC tool and maintain centralized source control and documentation repositories (e.g., Azure Repos).
- Integrate with RESTful APIs to automate data transfers, reporting, and system updates.
- Troubleshoot system issues, identify root causes, and ensure timely resolution.
- Maintain system and project documentation across repositories and knowledge bases.
- Partner with the platform vendor on software issues, updates, and enhancements.
- Participate in development activities, including testing, implementation, and documentation.
- Perform additional duties as assigned.
Requirements
Required Skills & Qualifications
- 2–3+ years of Python programming experience
- 1–2+ years developing automation scripts and API integrations (RESTful APIs)
- General understanding of database design
- Basic programming experience in Java or C#
- Familiarity with DevOps practices and risk management concepts
- Experience working within Agile methodologies (e.g., sprints)
- Strong troubleshooting and analytical problem‑solving skills
- Excellent communication and cross-team collaboration abilities
Preferred Qualifications
- Experience with automated testing
- Hands-on experience with any Governance, Risk & Compliance (GRC) tool
- Understanding of GRC frameworks
- Familiarity with security frameworks such as CJIS, IRS 1075, PCI, or ARC-AMPE