Senior AI-Driven Security GRC & Automation Engineer

American Express Global Business Travel; Boise (ID); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Travel perks

Flexible benefits

Learning opportunities

Job summary

American Express Global Business Travel is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions that modernize the governance, risk, and compliance program. You will translate manual processes into automated, data-driven workflows and collaborate across security, engineering, and business teams.

The role requires hands-on engineering with GRC expertise, experience applying AI/ML to real-world use cases, and familiarity with frameworks like NIST,

Qualifications

• Bachelor’s degree or equivalent experience.
• 5+ years in security engineering, GRC, or related field.
• Strong programming/scripting skills and API experience.
• Hands-on AI/ML experience applied to business/security use cases.

Responsibilities

• Design, build, and maintain automation pipelines for collecting, normalizing, and validating evidence across security and business systems.
• Evaluate, prototype, and deploy AI/LLM-based solutions to accelerate GRC workflows including evidence review and risk narrative generation.
• Integrate GRC tooling with security and IT systems via APIs to enable automated data flows, dashboards, and reporting.
• Develop and maintain scripts, bots, and workflow tools to automate recurring GRC tasks.
• Partner with analysts and program managers to re-engineer manual processes into scalable automated solutions.
• Establish guardrails, testing, and quality controls for AI-assisted outputs to ensure regulatory compliance.

Skills

Python

JavaScript

APIs

Automation

GRC

AI/LLM

Security Eng.

Communication

Education

Bachelor’s degree in CS/IS

Tools

Onspring

Archer

MetricStream

Job description

American Express Global Business Travel is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions that modernize the governance, risk, and compliance program. You will translate manual processes into automated, data-driven workflows and collaborate across security, engineering, and business teams.

The role requires hands-on engineering with GRC expertise, experience applying AI/ML to real-world use cases, and familiarity with frameworks like NIST,