Programmer 3 GRC Administrator and Developer

Roles/Responsibilities:

• Serve as the primary administrator and developer for the State of Michigans GRC tool (Navex IRM).
• Collaborate closely with stakeholders to understand security and compliance requirements and design tailored automation solutions.
• Lead automation initiatives for security accreditation processes including evidence collection workflow routing and control reviews to reduce manual effort.
• Design and implement unified security controls frameworks aligned with State of Michigan Standards and integrate CJIS v6.0 IRS 1075 PCI (SAQ A SAQ A-EP) and ARC-AMPE standards.
• Develop and maintain Python API modules and automation scripts to import and update compliance controls integrate CMDB vulnerability data and audit evidence for continuous monitoring.
• Work cross-functionally with IT security and business teams to ingest structured data (JSON CSV) into the GRC tool and maintain centralized Azure Repos for source control and documentation.
• Integrate with RESTful APIs to automate data imports exports and reporting in JSON and CSV formats.
• Troubleshoot issues identify solutions and ensure timely resolution.
• Maintain and update system and project documentation (Azure repositories SharePoint).
• Communicate with Navex IRM regarding software issues maintenance and upgrades.
• Analyze GRC issues/incidents to identify root causes and work with vendor support to implement solutions.
• Participate in development activities including testing implementation and documentation.
• Perform other duties as assigned.

Mandatory Skills:

1. Python programming (primary requirement) 2-3 years
2. Experience developing automation scripts and API integrations (RESTful APIs) 1-2 years
3. Experience with Agile methodology (e.g. sprints) 1-2 years
4. Risk Management knowledge 1-2 years
5. Database design expertise 2-3 years
6. Basic programming skills in Java or C#
7. Familiarity with DevOps practices.
8. Strong troubleshooting and problem-solving skills
9. Excellent communication and collaboration abilities

Desirable Skills:

1. Knowledge of any GRC tool (Navex IRM experience is a plus) 1-2 years
2. Experience with automated testing
3. Understanding of governance risk and compliance frameworks
4. Experience with security frameworks such as CJIS IRS 1075 PCI ARC-AMPE
5. Education: Bachelors Degree