GRC Administrator and Developer

Job Title: GRC Administrator and Developer (Programmer 3) Location: Lansing, MI (Hybrid) Duration: 12 Months Contract with Possible Extension • Interview Process: In-Person Interview Required • Candidates must be available to attend interviews onsite • Local candidates only (must reside within 1.5 hours of Lansing, MI) Key Responsibilities: • Serve as the primary administrator and developer for the State of Michigan's GRC platform (Navex IRM). • Collaborate with stakeholders to gather security and compliance requirements and develop automation solutions. • Lead automation initiatives for security accreditation processes, including evidence collection, workflow routing, and control reviews. • Design and implement security control frameworks aligned with State of Michigan standards and compliance requirements. • Develop and maintain Python-based automation scripts and API integrations. • Integrate compliance controls, CMDB data, vulnerability management information, and audit evidence into the GRC platform. • Build and maintain RESTful API integrations for importing, exporting, and reporting data. • Work with structured data formats including JSON and CSV. • Maintain source code repositories and technical documentation using Azure Repos and SharePoint. • Troubleshoot application issues and coordinate with vendor support for upgrades and issue resolution. • Analyze incidents and identify root causes while implementing corrective actions. • Participate in development, testing, implementation, and documentation activities. • Collaborate with cybersecurity, audit, IT, and business teams on enterprise initiatives. • Perform additional duties as assigned. Required Skills: • Python Programming – 2-3+ years • API Integration and Automation Development – 1-2+ years • Database Design Experience – 2-3+ years • Experience with RESTful APIs • Experience working with JSON and CSV data formats • Agile Methodology and Sprint-Based Development Experience – 1-2+ years • Risk Management Knowledge – 1-2+ years • Basic Java or C# Programming Experience • Familiarity with DevOps practices • Strong troubleshooting and problem-solving skills • Excellent written and verbal communication skills • Ability to work effectively in a collaborative team environment Preferred Skills: • Experience with Governance, Risk, and Compliance (GRC) tools • Navex IRM (Keylight) experience • Automated testing experience • Knowledge of governance, risk, and compliance frameworks • Experience with security and compliance standards such as: • CJIS v6.0 • IRS 1075 • PCI (SAQ A, SAQ A-EP) • ARC-AMPE