IO Datasphere, Inc. has been providing project management, software development and IT staff augmentation services to our clients in the Midwest and throughout the U.S. since 1996. We are an approved vendor on contract to provide software development and IT staff augmentation services for the States of Illinois, Michigan, Minnesota, Iowa, and Wisconsin. We also provide these services to businesses, as well as local and county governments, in the Midwest and nationwide.
Our client is looking for a Python/GRC Developer to be part of a collaborative team of information technology professionals dedicated to supporting the agency s mission and goals. The role focuses on maintaining and enhancing the Web-based Governance, Risk, and Compliance (GRC) tool, Navex IRM (formerly Keylight).
Tasks
- Responsibilities include administration, development, troubleshooting, and implementing new functionality.
- The position may also involve working on new development projects, testing, documentation, and cross-team collaboration with Michigan Cyber Security, Office of Internal Audit Systems, Office of the Chief Technology Officer, and the Enterprise Project Management Office.
- Serve as the primary administrator and developer for the client s tool (Navex IRM).
- Collaborate closely with stakeholders to understand security and compliance requirements and design tailored automation solutions.
- Lead automation initiatives for security accreditation processes, including evidence collection, workflow routing, and control reviews to reduce manual effort.
- Design and implement unified security controls frameworks aligned with Standards and integrate CJIS v6.0, IRS 1075, PCI (SAQ A, SAQ A-EP), and ARC-AMPE standards.
- Develop and maintain Python API modules and automation scripts to import and update compliance controls, integrate CMDB, vulnerability data, and audit evidence for continuous monitoring.
- Work cross-functionally with IT, security, and business teams to ingest structured data (JSON, CSV) into the GRC tool and maintain centralized Azure Repos for source control and documentation.
- Integrate with RESTful APIs to automate data imports, exports, and reporting in JSON and CSV formats.
- Troubleshoot issues, identify solutions, and ensure timely resolution.
- Maintain and update system and project documentation (Azure repositories, SharePoint).
- Communicate with Navex IRM regarding software issues, maintenance, and upgrades.
- Analyze GRC issues/incidents to identify root causes and work with vendor support to implement solutions.
- Participate in development activities, including testing, implementation, and documentation.
- Perform other duties as assigned.
Knowledge, Skills and Abilities Required:
- Strong troubleshooting and problem-solving skills
- Excellent communication and collaboration abilities
NOTE: Local candidates ONLY (must be within 1.5 hours from Lansing, MI at time of submission).Relocation not allowed. Resource will be working a hybrid schedule. NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week (Mondays and Tuesdays required)
Location: Lansing, MI
Contract: 1 year
Skills Required:
- 2-3+ years - Experience with Python programming
- 1-2+ years - Experience with API integration and automation
- 1-2+ years - Agile methodology experience
- 1-2+ years - Risk Management knowledge
- 2-3+ years - Database design expertise
- Basic programming skills in Java or C#
Skills Desired A plus to have:
- 1-2+ years - GRC tool familiarity
- Familiarity with DevOps practices and Risk Management concepts
- Experience with security frameworks such as CJIS, IRS 1075, PCI, ARC-AMPE
- Understanding of governance, risk, and compliance frameworks
- Bachelor's Degree in a related field
*** Rate depends on experience
*** Candidates authorized to work in the US are encouraged to apply. We can accept H1b, , TN, and other valid work visas for IT. However, we cannot accept OPT or CPT visas at this time.
*** Companies submitting candidates should only submit direct W2 employees for this position.
Please submit your resume by using the "URL" below