GRC Application Specialist

POSITION OVERVIEW
The GRC Application Specialist is a permanent role reporting to the GRC Apps & Process Lead. The Specialist administers and supports the team's GRC platforms and applications, brings a compliance and controls background, serves as backup to the GRC Apps & Process Lead, and supports other team activities during busy periods, including control validation and related processes. The Specialist also takes ownership of custom-developed tools and automation workflows delivered by project resources, so that solutions remain maintainable without ongoing dependency on the developer. The Specialist also supports privileged access management and user access certification tooling, and applies programming and AI-assisted coding skills within a defined software development lifecycle (SDLC).

DUTIES AND RESPONSIBILITIES

CORE JOB SKILLS/DUTIES:
• Administer and support GRC platforms and ITC-managed applications, including configuration, access, issue resolution, and user support.
• Provide backup coverage for the GRC Apps & Process Team across platform administration (Optro, formerly known as AuditBoard; ServiceNow; and Wdesk) and process activities.
• Support control validation and related compliance processes, particularly during busy periods.
• Support and maintain custom-developed tools and automation workflows, including minor code changes, fixes, and enhancements.
• Administer and support privileged access management (PAM) and identity governance tools, including user access certification and access review campaigns (for example SailPoint, Pathlock, Fastpath, and similar platforms), covering campaign setup, reviewer follow-up, evidence retention, and remediation tracking.
• Support IT segregation of duties (SoD) analysis and privileged access monitoring using access governance tools, including role and entitlement mapping, rule maintenance, and exception documentation.
• Write, review, and troubleshoot scripts and code (for example Python, SQL, and PowerShell) using AI-assisted coding tools such as GitHub Copilot, Claude Code, or similar, and validate AI-generated code through testing and peer review before release.
• Use Git repositories, version control, and established deployment processes to manage changes to custom applications and scripts.
• Follow the SDLC for custom tools and scripts, including requirements, development, testing, approval, release, and documentation, and manage Git repositories through branching, pull requests, code review, merge, tagging, and rollback practices.
• Perform application testing and validation, and follow change management procedures for updates to supported applications and tools.
• Receive and maintain solutions handed over by project resources, and keep documentation and runbooks current.
• All work is performed internally within the IT Compliance and GRC Apps teams. The Specialist is not expected to interface directly with external stakeholders, vendors, or other business units.
• Adhere to internal standards, policies, and procedures, and perform other duties as assigned.

EDUCATION AND EXPERIENCE
• College graduate in IT, Computer Science, Information Systems, or a related field.
• Minimum of 5 to 7 years of relevant work experience in compliance, controls, or GRC platform administration.
• Good understanding of custom application code, with the ability to make minor changes. A full-stack developer is not required.
• Familiarity with Git repositories, version control, and deployment processes.
• Programming experience, with the ability to write, read, and modify code (for example Python, SQL, or PowerShell) using AI-assisted coding tools, and to review AI-generated code for accuracy, security, and maintainability.
• Understanding of the SDLC and of Git concepts and repository management, including branching strategies, pull requests, merge conflict resolution, code reviews, release tagging, and access controls on repositories.
• Experience with application testing, validation, and change management.
• Ability to support and maintain custom-developed tools and automation workflows.
• Amenable to working US hours (CST, night shift).