Security GRC Engineer, AI-Driven Automation Lead

American Express Global Business Travel; Washington (District of Columbia); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Skills development

Diversity & Inclusion

Job summary

American Express Global Business Travel is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. You will translate manual processes into automated workflows and work across security, engineering, data, and business teams.

The role requires hands-on engineering with strong GRC knowledge, and a passion for applying AI/automation to reduce risk and improve control coverage.

Qualifications

• Bachelor’s degree in CS, information security, information systems, or related field.
• 5+ years in security engineering, GRC, or related field with automation/AI experience.
• Strong programming/scripting (Python/JavaScript) and API/databases experience.
• Hands-on AI/ML experience with LLMs for business or security use cases.
• Knowledge of NIST, ISO 27001, SOC 2 and GDPR/PCI DSS.
• Experience configuring or integrating GRC platforms (Onspring/Archer/MetricStream).
• Strong analytical, problem-solving and communication skills.

Responsibilities

• Design, build, and maintain automation pipelines for collecting, normalizing, and validating evidence across systems.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tooling with security/IT systems via APIs to enable automated data flows and reporting.
• Develop scripts, bots, and workflow tools to automate recurring GRC tasks.
• Partner with analysts and program managers to re-engineer manual processes into scalable automation.
• Establish guardrails and quality controls for AI-assisted outputs.
• Monitor performance, reliability, and risk posture of automation tools.
• Stay current with AI, automation, and GRC tech, recommending improvements.

Skills

Programming

AI/ML experience

GRC automation

APIs & integration

Security engineering

Analytical skills

Communication

Education

Bachelor's degree (CS / Info Sec / IS or related)

Tools

Onspring

Archer

MetricStream

Job description

American Express Global Business Travel is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. You will translate manual processes into automated workflows and work across security, engineering, data, and business teams.

The role requires hands-on engineering with strong GRC knowledge, and a passion for applying AI/automation to reduce risk and improve control coverage.