Lead I - Software Engineering - Python GRC

Role Description

3+ years software development / Python 3.9+; OOP and modular/plugin architecture

Experience building desktop apps, CLI tools, and backend/API services

Hands-on with data processing (pandas), Excel automation (openpyxl), and databases (SQLite + SQL Server/PostgreSQL exposure)

Knowhow of REST APIs, GitHub + CI/CD (Actions) and testing/linting (pytest, ruff, black, mypy)

Experience with production support, debugging, and secure system design

Infrastructure Vulnerabilities

To identify, report and assist with remediation efforts working with the Application Teams, I&E as well as GDS. Also, assist with reporting on Risk Factory dash boards and distribution of reporting to various teams, individuals to keep vulnerability reporting available and address critical concerns / vulnerability types.

Ciam/Wiam

Assist with reporting, Risk Factory Dash Boards and JIRA's to assist PGTL's, Application Owners, Application support in remediation of their identified risk findings.

Risk Factory Functions

Application(s) specific Infrastructure vulnerability remediation efforts

Monitoring CIAM /WIAM findings / JIRA reporting to assist for remediation efforts.

Support Enterprise KRI Management as per requested.

Support development and delivery of e-mails / follow up / Infrastructure vulnerability reporting

Other duties as assigned.

Responsibilities

Risk Factory Support:

Maintain and manage compliance to control requirements for previously identified and remedied Technology initiatives.

Continuous maintenance of initiatives that reach certain maturity levels after having gone through Remediation, Sustainability and BAU phase from any of the Tech Factories (e.g. Audit, Risk, Cloud, Currency etc.)

Maintain the process documents outlining how to test, who to engage, and what evidence to collect for in-scope control requirements (e.g., data encryption).

Leverages existing SOPs and documentation to perform assessments in the following scenarios:

New applications moving from Dev to production

Existing Applications whose parameters (e.g., data classification) change, identified via regular reports

Proactive Assessment - Perform assessments at regular intervals to determine if there are any vulnerabilities proactively

Changes to the Enterprise Standard requirements.

Skills

python,data processing,rest api,vulnerability management,