AI-Driven Security GRC Engineer — Automation Innovator

American Express Global Business Travel; Honolulu (HI); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Job summary

American Express Global Business Travel is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI‑driven solutions for governance, risk, and compliance. The role blends security engineering with GRC, transforming manual processes into automated workflows.

The ideal candidate has hands‑on engineering experience, strong knowledge of GRC concepts, and a drive to apply AI to reduce risk and improve control coverage across security and business systems.

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• 5+ years in security engineering, GRC, or related field with automation/AI‑enabled solutions.
• Strong programming/scripting skills (Python/JavaScript) and API/databases experience.
• Hands‑on AI/ML experience applied to real‑world business/security use cases.
• Familiarity with cybersecurity frameworks (NIST, ISO 27001, SOC 2) and regulatory requirements (GDPR, PCI DSS).

Responsibilities

• Design, build, and maintain automation pipelines for collecting and validating evidence.
• Prototype and deploy AI/LLM‑based solutions to accelerate GRC workflows.
• Integrate GRC tools with systems via APIs for data flows, dashboards, reporting.
• Develop scripts, bots, and workflows to automate recurring GRC tasks.
• Collaborate with security GRC analysts to re‑engineer manual processes into scalable automation.
• Establish guardrails and testing to ensure AI outputs are accurate and compliant.
• Monitor performance and risk posture of automation tools within GRC.
• Stay updated on AI/automation/GRC tech and advocate new tools.
• Collaborate across security, engineering, data, and business teams to align automation with goals.

Skills

Python/JavaScript

AI/ML experience

APIs & Databases

NIST ISO 27001 SOC 2 GDPR PCI DSS

Communication skills

Education

Bachelor’s degree in computer science, information security, information systems, or related field

Tools

Onspring

Archer

MetricStream

Job description

American Express Global Business Travel is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI‑driven solutions for governance, risk, and compliance. The role blends security engineering with GRC, transforming manual processes into automated workflows.

The ideal candidate has hands‑on engineering experience, strong knowledge of GRC concepts, and a drive to apply AI to reduce risk and improve control coverage across security and business systems.