AI-Powered GRC Engineer — Security Automation Lead

American Express Global Business Travel; Cheyenne (WY); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning & development

Job summary

American Express Global Business Travel seeks a Senior Security GRC Engineer to design and scale AI-driven automation for governance, risk, and compliance. You will translate manual processes into data-driven workflows and integrate leading GRC platforms with security systems.

The role requires hands-on engineering with GRC knowledge, strong scripting, and experience applying AI/ML to real-world security use cases. Strong communication and collaboration are essential for cross-team alignment.

Qualifications

• Bachelor’s degree in computer science, information security, information systems, or related field (or equivalent experience).
• 5+ years of experience in security engineering, GRC, or related field with automation/AI-enabled solutions.
• Strong programming/scripting skills (Python, JavaScript) and API/database/workflow automation experience.
• Hands-on experience applying AI/machine learning (LLMs) to business or security use cases.
• Solid understanding of NIST, ISO 27001, SOC 2 and GDPR/PCI DSS requirements.
• Experience with GRC platforms Onspring/Archer/MetricStream including configuration/integration.

Responsibilities

• Design, build, and maintain automation pipelines for collecting, normalizing, and validating compliance evidence.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tooling with security/IT systems via APIs for automated data flows and dashboards.
• Develop scripts, bots, and workflow tools to automate recurring GRC tasks.
• Collaborate with analysts and program managers to re-engineer manual processes into automated solutions.
• Establish guardrails and testing to ensure AI outputs are accurate and compliant.
• Monitor performance, reliability, and risk posture of automation and AI tools.
• Stay current with AI, automation, and GRC tech to improve program maturity.

Skills

Python

APIs

Scripting

GRC tooling

AI/ML

Education

Bachelor’s degree in computer science, information security, information systems, or related field

Tools

Onspring

Archer

MetricStream

Job description

American Express Global Business Travel seeks a Senior Security GRC Engineer to design and scale AI-driven automation for governance, risk, and compliance. You will translate manual processes into data-driven workflows and integrate leading GRC platforms with security systems.

The role requires hands-on engineering with GRC knowledge, strong scripting, and experience applying AI/ML to real-world security use cases. Strong communication and collaboration are essential for cross-team alignment.