Programmer - GRC Administrator and Developer

This position is part of a collaborative team of information technology professionals dedicated to supporting the agency’s mission and goals. The role focuses on maintaining and enhancing the State of Michigan’s Web -based Governance, Risk, and Compliance (GRC) tool, Navex IRM (formerly Keylight). Responsibilities include administration, development, troubleshooting, and implementing new functionality. The position may also involve working on new development projects, testing, documentation, and cross -team collaboration with Michigan Cyber Security, Office of Internal Audit Systems, Office of the Chief Technology Officer, and the Enterprise Project Management Office
<\/div>

<\/div>

Job Duties
<\/h2>

• Serve as the primary administrator and developer for the State of Michigan’s GRC tool (Navex IRM).
  <\/span><\/li>
• Collaborate closely with stakeholders to understand security and compliance requirements and design tailored automation solutions.
  <\/span><\/li>
• Lead automation initiatives for security accreditation processes, including evidence collection, workflow routing, and control reviews to reduce manual effort.
  <\/span><\/li>
• Design and implement unified security controls frameworks aligned with State of Michigan
  <\/span><\/li>
• Standards and integrate CJIS v6.0, IRS 1075, PCI (SAQ A, SAQ A -EP), and ARC -AMPE standards.
  <\/span><\/li>
• Develop and maintain Python API modules and automation scripts to import and update compliance controls, integrate CMDB, vulnerability data, and audit evidence for continuous monitoring.
  <\/span><\/li>
• Work cross -functionally with IT, security, and business teams to ingest structured data (JSON, CSV) into the GRC tool and maintain centralized Azure Repos for source control and documentation.
  <\/span><\/li>
• Integrate with RESTful APIs to automate data imports, exports, and reporting in JSON and CSV formats.
  <\/span><\/li>
• Troubleshoot issues, identify solutions, and ensure timely resolution.
  <\/span><\/li>
• Maintain and update system and project documentation (Azure repositories, SharePoint).
  <\/span><\/li>
• Communicate with Navex IRM regarding software issues, maintenance, and upgrades.
  <\/span><\/li>
• Analyze GRC issues/incidents to identify root causes and work with vendor support to implement solutions.
  <\/span><\/li>
• Participate in development activities, including testing, implementation, and documentation.
  <\/span><\/li>
• Perform other duties as assigned.
  <\/span><\/li><\/ul>

  
  <\/div><\/span>
  

  Requirements <\/h3>

  2 -3+ years: <\/span>
  <\/div>

  • Python programming (primary requirement)
    <\/span><\/li>
  • Database design expertise
    <\/span><\/li><\/ul>

    1 -2+ years:
    <\/div>

    • API integration and automation experience
      <\/span><\/li>
    • Agile methodology experience
      <\/span><\/li>
    • Risk Management knowledge
      <\/span><\/li>
    • GRC tool familiarity (preferred)<\/span>
      <\/li><\/ul>

      Python programming experience
      <\/div>

      Experience developing automation scripts and API integrations (RESTful APIs)
      <\/div>

      General knowledge of database design
      <\/div>

      Basic programming skills in Java or C#
      <\/div>

      Familiarity with DevOps practices and Risk Management concepts
      <\/div>

      Experience with Agile methodology (e.g., sprints)
      <\/div>

      Strong troubleshooting and problem -solving skills
      <\/div>

      Excellent communication and collaboration abilities
      <\/div>

      
      <\/div>

      Desired Skills
      <\/h3>

      • Experience with automated testing
        <\/span><\/li>
      • Knowledge of any GRC tool (Navex IRM experience is a plus)
        <\/span><\/li>
      • Understanding of governance, risk, and compliance frameworks
        <\/span><\/li>
      • Experience with security frameworks such as CJIS, IRS 1075, PCI, ARC -AMPE
        <\/span><\/li><\/ul>

        
        <\/div>

        Minimum Education
        <\/h2>

        • Bachelor's Degree <\/span>
          <\/li><\/ul>

          <\/span>
          <\/div>

          Location
          <\/h2>

          • Local candidates ONLY <\/b> (must be within 1.5 hours from Lansing, MI at time of submission)<\/span>
            <\/li>
          • Position
            is a hybrid schedule with onsite from day 1, two days a week (Mondays and Tuesdays required) NO REMOTE ONLY OPTION <\/span><\/span>
            <\/li>
          • Working hours
            Monday -Friday, approximately 8:00 a.m. to
            5:00 p.m. <\/span><\/span><\/span><\/span>
            <\/li><\/ul>

            Additional
            Requirements
            <\/h2>

            • Must be authorized to
              work in the United States; We are unable to offer
              sponsorships at this time <\/b><\/span>
              <\/span><\/li>
            • Must undergo a background check
              and drug screening for employment. <\/span>
              <\/li><\/ul>

              
              <\/div>

              Employment
              Terms
              <\/h2>

              • This is a W2 position <\/span>
                <\/li>
              • 40 hrs per week <\/span>
                <\/li>
              • <\/span> HYBRID schedule - onsite from day 1, two days a week (Mondays and Tuesdays required) NO REMOTE ONLY OPTION <\/span><\/span>
                <\/li><\/ul>

                
                <\/div>

                About
                Zenfreed
                <\/h2>

                
                <\/div>

                At
                Zenfreed, we are more than an IT company. We bridge the
                gap between people wanting to do the work they were meant to do
                and organizations needing the right talent.
                <\/div>

                
                <\/div>

                We are dedicated to building a diverse,
                inclusive and authentic workplace, so if you’re excited
                about this role but your past experience doesn’t align
                perfectly with every qualification in the job description,
                we encourage you to apply anyway. You may be just the right
                candidate for this or other roles.
                <\/div>

                
                <\/div><\/div><\/div>

                
                <\/div><\/span>
                

                Benefits <\/h3>

                We understand a comprehensive benefits package is crucial to
                employment satisfaction. We offer medical, dental and vision coverage
                options for all employees.
                <\/div><\/span>