AI-Driven Security GRC Engineer: Automation & Risk

American Express Global Business Travel; Carson City (NV); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel seeks a Senior Security GRC Engineer in the United States to design, build, and scale automation and AI-driven solutions for GRC. You will translate manual, evidence-heavy processes into automated, data-driven workflows and partner with security and program teams to improve risk coverage.

Ideal candidates combine hands-on engineering with solid GRC knowledge and the ability to apply AI to reduce risk while ensuring regulatory compliance and audit readiness

Qualifications

• Bachelor's degree in CS/IS or related field, or equivalent experience.
• 5+ years in security engineering, GRC, or related field with automation/AI experience.
• Strong programming/scripting skills and API, DB workflow experience.
• Hands-on AI/ML experience with LLMs in business or security use cases.
• Knowledge of NIST, ISO 27001, SOC 2 and GDPR/PCI DSS requirements.
• Experience configuring/integrating GRC platforms such as Onspring/Archer/MetricStream.
• Strong analytical and communication skills with ability to translate complex processes into automation.

Responsibilities

• Design, build, and maintain automation pipelines for evidence collection and validation.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tools with security and IT systems via APIs for automated data flows.
• Develop scripts, bots, and workflow tools for recurring GRC tasks.
• Partner with analysts and managers to re-engineer manual processes into scalable solutions.
• Establish guardrails, testing, and quality controls for AI outputs to ensure compliance.
• Monitor performance, reliability, and risk of automation and AI tools in GRC.
• Stay current with AI, automation, and GRC tech and adopt new tools as needed.
• Collaborate with other AmexGBT teams to align automation with security posture.

Skills

Python

JavaScript

APIs

AI/ML

LLMs

GRC

Education

Bachelor's degree

Tools

Onspring

Archer

MetricStream

Job description

American Express Global Business Travel seeks a Senior Security GRC Engineer in the United States to design, build, and scale automation and AI-driven solutions for GRC. You will translate manual, evidence-heavy processes into automated, data-driven workflows and partner with security and program teams to improve risk coverage.

Ideal candidates combine hands-on engineering with solid GRC knowledge and the ability to apply AI to reduce risk while ensuring regulatory compliance and audit readiness