GRC (Governance, Risk, and Compliance) Engineer

Midcontinent Independent System Operator (MISO); Carmel (IN); On-site; USD 149,000 - 163,000; Full time

Benefits offered by this job

401k

Vacation

Sick leave

Available on start

Job summary

Midcontinent Independent System Operator (MISO) is seeking its first GRC Engineer to establish and strengthen the Governance, Risk, and Compliance discipline. You will automate notifications, reporting, and daily workflows to reduce manual effort and support growing cyber responsibilities and AI/quantum initiatives.

You will lead automation strategy, build integrations across GRC platforms, and guide architecture decisions as we create a scalable GRC automation program from the ground up.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Risk Management or related field. Advanced degree preferred.
• 10+ years of professional experience in GRC engineering or similar role.
• Ability to work independently in a fast-moving environment.
• Experience with risk management, control frameworks, and compliance operations.

Responsibilities

• Design and develop automation for controls evidence collection, testing, and workflow orchestration across GRC ecosystem.
• Build and maintain integrations across GRC platforms, internal systems, and external APIs.
• Identify opportunities to reduce manual work and improve process consistency for GRC automation.
• Develop automated risk-management processes including risk intake, scoring, documentation workflows, and monitoring.
• Collaborate with stakeholders to translate complex risk requirements into scalable engineered solutions.
• Create automation for third‑party risk activities like onboarding, assessments, monitoring, and workflow standardization.

Skills

Independent work

Problem solving

GRC engineering

Risk management

Education

Bachelor's degree in Information Security / Cybersecurity / Risk Management

Tools

Archer / enterprise GRC platforms

Job description

MISO is seeking our first GRC (Governance, Risk, and Compliance) Engineer to establish and strengthen the engineering discipline within our Governance, Risk, and Compliance program. This role is designed to help the organization prepare for expanding cyber responsibilities, emerging technologies such as AI and quantum, and the broader industry shift toward automated GRC engineering. You will focus on automating notifications, reporting, and daily operational workflows to reduce manual effort and increase efficiency. High‑priority initiatives will span multiple GRC areas, emphasizing quick‑win automation opportunities and building a new annual program from the ground up. As the trusted technical lead, you will guide key decisions, validate solutions, and shape the automation roadmap for a highly visible and high‑impact function.

What you’ll do as our GRC (Governance, Risk, and Compliance) Engineer:

• Design and develop automation that streamlines controls evidence collection, controls testing, and workflow orchestration across the GRC ecosystem.
• Build and maintain integrations across GRC platforms, internal systems, and external APIs to support seamless data flow and workflow consistency.
• Identify and implement opportunities to reduce manual work, improve process consistency, and support the long‑term roadmap for GRC automation capabilities.
• Build and maintain automated risk‑management processes, including risk intake, scoring, documentation workflows, and continuous monitoring.
• Partner with stakeholders to translate complex risk and compliance requirements into scalable, engineered solutions.
• Create automation for third‑party risk activities such as onboarding, assessments, monitoring, and workflow standardization.

Skills needed for our GRC (Governance, Risk, and Compliance) Engineer:

• Bachelor's degree in Information Security, Cybersecurity, Risk Management, or a related field. Advanced degree preferred.
• 10+ years of professional experience and 4 years of relevant work experience in GRC engineering or a similar role.
• Ability to work independently, drive initiatives forward, and deliver solutions with minimal direction in a fast‑moving environment.
• Strong problem‑solving mindset with a willingness to build new capabilities, including compliance‑as‑code or policy‑as‑code solutions, from the ground up.
• Background with Archer or other enterprise GRC platforms, and exposure to risk management, control frameworks, and compliance operations.

Appropriate level will be determined based upon experience and knowledge.

Transformative innovation is happening in the electric industry, from digitalizing homes and distributed resources to renewable energy and an ever‑changing grid. MISO manages the electricity superhighway in the Central U.S. and through use of groundbreaking research and advanced technology, our highly skilled employees ensure power flows reliably to 45 million Americans. Operating the electricity grid, running a robust energy market, planning for a bright future – it’s what our immensely hardworking and dedicated team does every day.

The base salary compensation range being offered for this role is $149,000 - $163,000 USD annually. Base salary range for this position is included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, and qualifications/experience.

Position is also eligible for an annual bonus if individual performance and company objectives are met.

At MISO we offer a comprehensive benefits package,

• 401k
• vacation
• sick and safe time
• available on your first day of employment