Lead I - Software Engineering - Python GRC

3+ years software development / Python 3.9+; OOP and modular/plugin architecture
Experience building desktop apps, CLI tools, and backend/API services
Hands-on with data processing (pandas), Excel automation (openpyxl), and databases (SQLite + SQL Server/PostgreSQL exposure)
Knowhow of REST APIs, GitHub + CI/CD (Actions) and testing/linting (pytest, ruff, black, mypy)
Experience with production support, debugging, and secure system design

Infrastructure Vulnerabilities:
To identify, report and assist with remediation efforts working with the Application Teams, I&E as well as GDS. Also, assist with reporting on Risk Factory dash boards and distribution of reporting to various teams, individuals to keep vulnerability reporting available and address critical concerns / vulnerability types.
CIAM/WIAM:
Assist with reporting, Risk Factory Dash Boards and JIRAs to assist PGTLs, Application Owners, Application support in remediation of their identified risk findings.
Risk Factory Functions:
Application(s) specific Infrastructure vulnerability remediation efforts
Monitoring CIAM /WIAM findings / JIRA reporting to assist for remediation efforts.
Support Enterprise KRI Management as per requested.
Support development and delivery of e-mails / follow up / Infrastructure vulnerability reporting
Other duties as assigned.
Responsibilities:
Risk Factory Support:
Maintain and manage compliance to control requirements for previously identified and remedied Technology initiatives.
Continuous maintenance of initiatives that reach certain maturity levels after having gone through Remediation, Sustainability and BAU phase from any of the Tech Factories (e.g. Audit, Risk, Cloud, Currency etc.)
Maintain the process documents outlining how to test, who to engage, and what evidence to collect for in-scope control requirements (e.g., data encryption).
Leverages existing SOPs and documentation to perform assessments in the following scenarios:
New applications moving from Dev to production
Existing Applications whose parameters (e.g., data classification) change, identified via regular reports
Proactive Assessment - Perform assessments at regular intervals to determine if there are any vulnerabilities proactively
Changes to the Enterprise Standard requirements.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.