GRC Automation Engineer

Granicus; United States; On-site; USD 104,000 - 123,000; Full time

Benefits offered by this job

Flexible Time Off

Wellbeing Days

Work From Home Reimbursement

Health Plan Options

HSA Contributions

Fitness Reimbursement

Mental Health Support

Parental Leave

401(k) Match

Life Insurance

Online Learning

Bonuses

Job summary

Granicus is seeking a GRC Automation Engineer with experience in AI tools and automation to strengthen governance, risk, and compliance processes while maintaining security and privacy. The role blends security and automation, partnering with the GRC team to automate manual tasks and improve efficiency.

You will design, test, and implement AI-enabled workflows, build dashboards and reports, and evaluate emerging AI technologies for regulatory alignment across FedRAMP, CJIS, HIPAA, PCI and more.

Qualifications

• 3-6 years of related development experience.
• BA/BS in Engineering or related field.
• Hands-on experience evaluating and applying AI tools to solve business challenges.
• Curiosity and continuous learning around emerging AI capabilities in security and compliance.

Responsibilities

• Build automations that reduce manual work across information security and compliance activities.
• Develop AI-enabled automations for workflows across FedRAMP, CJIS, HIPAA, PCI, and IP.
• Design, test, and optimise AI-assisted workflows and prompts.
• Evaluate emerging AI technologies for governance, risk, and compliance use cases.
• Develop dashboards and repeatable reporting for leadership on status and gaps.

Skills

AI tool evaluation

Automation engineering

Security & compliance

Communication

Problem solving

Education

BA/BS in Engineering or related field

Tools

APIs

Scripting

Low-code / no-code platforms

Job description

The Company

Serving the People Who Serve the People

Granicus is driven by the excitement of building, implementing, and maintaining technology that is transforming the Govtech industry by bringing governments and its constituents together. We are on a mission to support our customers with meeting the needs of their communities and implementing our technology in ways that are equitable and inclusive. Granicus has consistently appeared on the GovTech 100 list over the past 5 years and has been recognized as the best companies to work on BuiltIn.

Over the last 25 years, we have served 5,500 federal, state, and local government agencies and more than 300 million citizen subscribers power an unmatched Subscriber Network that use our digital solutions to make the world a better place. With comprehensive cloud-based solutions for communications, government website design, meeting and agenda management software, records management, and digital services, Granicus empowers stronger relationships between government and residents across the U.S., U.K., Australia, New Zealand, and Canada. By simplifying interactions with residents, while disseminating critical information, Granicus brings governments closer to the people they serve—driving meaningful change for communities around the globe.

Want to know more? See more of what we do here.

Job Summary

We are looking for a GRC Automation Engineer who has experience with AI tools and building automation. The role will identify, evaluate and implement AI-enabled solutions that improve governance, risk and compliance processes whilst maintaining security, privacy and regulatory requirements.

This role blends information security and compliance with automation, engineering, and solutioning. We are looking for someone who is inquisitive, a builder, and a problem solver who will partner with the GRC team to learn the current processes and build automation to increase team effectiveness and enable the team to grow into more in-depth security analysis.

What Your Impact Will Look Like

• Build automations that reduce manual work across information security and compliance activities, including evidence collection, control validation, audit preparation, POA&M tracking, continuous monitoring, reporting, and task management.
• Build third party security review automations to support new procurement and recurring reviews, including for third parties that impact FedRAMP, CJIS, HIPAA, PCI, and IP.
• Use AI-enabled tools, AI agents, low-code/no-code platforms, scripts, APIs, and integrations to streamline repeatable compliance workflows and improve consistency, traceability, and timeliness. Design, test and optimise AI-assisted workflows and prompts to increase operational efficiency.
• Evaluate emerging AI technologies and identify practical applications for governance, risk and compliance use cases.
• Assess AI-enabled automations for security, privacy, regulatory compliance, auditability and alignment with organisational AI governance standards.
• Leverage AI-assisted analysis to identify trends, risks, control gaps and remediation opportunities across security and compliance data.
• Partner with Security, Engineering, Product, IT, Legal, and business teams to understand current manual processes, document requirements, and translate them into automated workflows.
• Support automation across multiple compliance frameworks, including FedRAMP, CJIS, ISO 27001, ISO 42001, SOC 2, PCI, HIPAA, FISMA, and CyberEssentials, including controls and governance requirements associated with AI technologies.
• Support ongoing transformation from FedRAMP rev5 legacy reporting and auditing requirements to the new Consolidated New Rules (CNRs) and 20.x. This includes transforming vulnerability management (scan to tickets to reporting, modern risk analysis and scoring, trend analysis), inventory management and reporting for FedRAMP, POA&M reporting, and deviation management.
• Evaluate team processes to identify automation opportunities and execute.
• Develop dashboards, metrics, and repeatable reporting that help leadership understand compliance status, control health, audit readiness, risks, gaps, and remediation progress.
• Grow into a trusted builder on the GRC team by learning compliance frameworks, cloud environments, secure engineering practices, and practical automation patterns.

You Will Love This Job If You Have

• You have 3-6 years of related experience in various development roles
• You have a BA/BS in Engineering or a related field
• You have hands-on experience evaluating and applying AI tools, agents or automation technologies to solve business or operational challenges.
• You demonstrate curiosity and continuous learning around emerging AI capabilities and their practical application within security and compliance functions.
• You have hands-on experience identifying automation opportunities and building the solutions
• You communicate well with team members and customers
• You are adaptable and enjoy working in a fast-paced dynamic environment
• You demonstrate the ability to meet deadlines without compromising accuracy.

Pay Range

USD $103,600.00 - USD $123,000.00 /Yr.

About Us

Don’t have all the skills/experience mentioned above? At Granicus, we are trying to build diverse, inclusive teams. We do not have degree requirements for most of our roles. If you don’t meet every requirement above but are excited to learn more, we encourage you to apply. We might just be able to find another role that could be a perfect fit!

Security and Privacy Requirements

• Responsible for Granicus information security by appropriately preserving the Confidentiality, Integrity, and Availability (CIA) of Granicus information assets in accordance with the company's information security program.
• Responsible for ensuring the data privacy of our employees and customers, their data, as well as taking all required privacy training in a timely manner, in accordance with company policies.

The Team

• We are a remote-first company with a globally distributed workforce across the United States, Canada, United Kingdom, India, Armenia, Australia, and New Zealand.

The Culture

• At Granicus, we are building a transparent, inclusive, and safe space for everyone who wants to bea part of our journey.
• A few culture highlights include – Employee Resource Groups to encourage diverse voices
• Coffee with Mark sessions – Our employees get to interact with our CEO on very important andsometimes difficult issues ranging from mental health to work-life balance and current affairs.
• Microsoft Teams communities focused on wellness, art, furbabies, family, parenting, and more.
• We bring in special guests from time to time to discuss issues that impact our employeepopulation

The Impact

• We are proud to serve dynamic organizations around the globe that use our digital solutions to make the world a better place — quite literally. We have so many powerful success stories that illustrate how our solutions are impacting the world. See more of our impact here.

The Benefits

At Granicus, we offer acomprehensive and flexible benefits package designed to support your well-being, growth, and work-life balance—starting from day one.

Flexibility & Balance

• Flexible Time Off – Take the time you need to rest, recharge, and live your life.
• Company-Wide Wellbeing Days – Paid days off to unplug and focus on your mental health.
• Work From Home Reimbursement – Support a productive home office environment.

Health & Wellness

• Multiple Health Plan Options – Including a 100% employer-paid plan.
• Employer HSA Contributions – When enrolled in a High-Deductible Health Plan.
• Fitness Reimbursement Program – Stay active, your way.
• On-Demand Mental Health Support – Access to Headspace and other wellness tools.

Family & Future

• Paid Parental Leave – For both birthing and non-birthing parents.
• Traditional & Roth 401(k) – With a generous company match.
• Life & AD&D Insurance – 100% employer-paid coverage for peace of mind.

Growth & Recognition

• Online Learning Platforms – Fuel your professional development.
• Competitive Salary & Bonuses – Your contributions are valued and rewarded.

Equal Opportunity Employer

Granicus is committed to providing equal employment opportunities. All qualified applicants and employees will be considered for employment and advancement without regard to race, color, religion, creed, national origin, ancestry, sex, gender, gender identity, gender expression, physical or mental disability, age, genetic information, sexual or affectional orientation, marital status, status with regard to public assistance, familial status, military or veteran status or any other status protected by applicable law.