Software Developer

The Information Security GRC team is seeking an experienced Software Developer contractor to help develop and expand internal GRC technology, automation, and assurance capabilities. Duration is 3 months (short term).

This is a hands-on development engagement embedded directly within GRC. The contractor will partner with compliance practitioners to translate complex, manual compliance processes into secure, scalable technology and automation supporting IT controls, assurance, audit operations, evidence activities, and compliance reporting. The engagement will focus on expanding internal capabilities, automating control and evidence processes, strengthening integrations, improving production readiness, and enabling responsible AI-assisted compliance workflows.

Requirements

· 3+ years of professional software development experience.

· Strong experience with Python and TypeScript/JavaScript.

· Experience developing modern web applications using React or similar frameworks.

· Experience designing and consuming REST APIs and working with JSON-based data.

· Experience with Git-based development, pull requests, and code review.

· Understanding of software development lifecycle practices, testing, and deployment.

· Ability to translate business requirements into maintainable technical solutions.

· Strong problem-solving skills and ability to work directly with non-engineering stakeholders.

· Ability and interest in learning GRC, SOX, IT controls, audit, and compliance concepts.

Will be a plus

· Modern React and web application development.

· Experience developing solutions on AWS or a comparable cloud platform.

· Infrastructure as Code and CI/CD experience.

· Python web frameworks and browser or workflow automation experience.

· Enterprise API integrations and data transformation / pipeline development.

· Application security and secure development practices.

· AI/LLM integration experience using enterprise AI services or comparable technologies.

· Observability, logging, and application monitoring.

· SOX, ITGC, audit, cybersecurity, risk, or GRC technology experience. GRC experience is helpful, but not required.

Responsibilities

Develop new capabilities across compliance, assurance, audit, obligation, and reporting workflows.

Build automation that reduces manual SOX, ITGC, audit, evidence collection, validation, and reconciliation activities.

Develop and enhance secure integrations with enterprise platforms and business systems.

Build secure APIs, data pipelines, and automation using modern programming languages, cloud services, and REST APIs.

Develop intuitive modern web experiences for GRC practitioners and control owners.

Expand automated evidence collection, validation, reconciliation, and testing capabilities.

Design reusable solutions that support multiple controls, systems, frameworks, and assurance activities rather than one-time scripts.

Build and maintain cloud infrastructure and deployment automation using Infrastructure as Code and CI/CD practices.

Implement appropriate authentication, secrets management, logging, monitoring, testing, and least-privilege access.

Partner with GRC practitioners to translate compliance requirements into technical requirements and working solutions.

Troubleshoot application issues and continuously improve reliability, performance, security, and usability.

Contribute to technical documentation, architecture decisions, code reviews, and development standards.

Explore responsible uses of AI to improve compliance intelligence, analysis, evidence review, and workflow automation.