Lead I - Software Engineering - Python GRC

Job Details

• Location: Trivandrum
• Experience: 5 - 7 Years
• Job Type: Full Time
• Openings: 1

Role Description

3+ years software development / Python 3.9+; OOP and modular/plugin architecture 
Experience building desktop apps, CLI tools, and backend/API services 
Hands-on with data processing (pandas), Excel automation (openpyxl), and databases (SQLite + SQL Server/PostgreSQL exposure) 
Knowhow of REST APIs, GitHub + CI/CD (Actions) and testing/linting (pytest, ruff, black, mypy) 
Experience with production support, debugging, and secure system design

Infrastructure Vulnerabilities:
To identify, report and assist with remediation efforts working with the Application Teams, I&E as well as GDS. Also, assist with reporting on Risk Factory dash boards and distribution of reporting to various teams, individuals to keep vulnerability reporting available and address critical concerns / vulnerability types. 
CIAM/WIAM: 
Assist with reporting, Risk Factory Dash Boards and JIRA's to assist PGTL's, Application Owners, Application support in remediation of their identified risk findings. 
Risk Factory Functions:
Application(s) specific Infrastructure vulnerability remediation efforts 
Monitoring CIAM /WIAM findings / JIRA reporting to assist for remediation efforts. 
Support Enterprise KRI Management as per requested. 
Support development and delivery of e-mails / follow up / Infrastructure vulnerability reporting 
Other duties as assigned. 
Responsibilities:
Risk Factory Support: 
Maintain and manage compliance to control requirements for previously identified and remedied Technology initiatives. 
Continuous maintenance of initiatives that reach certain maturity levels after having gone through Remediation, Sustainability and BAU phase from any of the Tech Factories (e.g. Audit, Risk, Cloud, Currency etc.) 
Maintain the process documents outlining how to test, who to engage, and what evidence to collect for in-scope control requirements (e.g., data encryption). 
Leverages existing SOPs and documentation to perform assessments in the following scenarios: 
New applications moving from Dev to production 
Existing Applications whose parameters (e.g., data classification) change, identified via regular reports 
Proactive Assessment - Perform assessments at regular intervals to determine if there are any vulnerabilities proactively 
Changes to the Enterprise Standard requirements.

Skills

<p>python, data processing, rest api, vulnerability management, </p>