Hi Mauricio,
If I understand your question correctly, if you wrote a job that triggered the removal of the unwanted privilege privilege and had the del_member event on all the privileges set to be the Grc approval task, that should do something like getting the removal approved in GRC before the removal is done by Idm.
Hope that helps?
Ian