Senior AI‑Driven Security GRC Engineer

American Express Global Business Travel

Montpelier (VT)

On-site

USD 104,000 - 194,000

Full time

6 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Job summary

American Express Global Business Travel seeks a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions modernizing governance, risk, and compliance. You will translate manual processes into automated workflows and apply AI to improve control coverage and risk posture, collaborating with security, engineering, data, and business teams.

Ideal candidates bring hands-on engineering experience with GRC principles and a strong track record of delivering scalable

Qualifications

Bachelor's degree in computer science, information security, information systems, or a related field (or equivalent experience).
5+ years of experience in security engineering, GRC, or a related field, with demonstrated experience building automation or AI‑enabled solutions.
Strong programming/scripting skills (e.g., Python, JavaScript) and experience with APIs and workflow automation tools.
Hands-on experience applying AI or machine learning technologies (including LLMs) to business or security use cases.
Solid understanding of cybersecurity frameworks (NIST, ISO 27001, SOC 2) and regulatory requirements (GDPR, PCI DSS).

Responsibilities

Design, build, and maintain automation pipelines that collect, normalize, and validate compliance and control evidence across security and business systems.
Evaluate, prototype, and deploy AI and LLM-based solutions to accelerate GRC workflows, including control testing and evidence review.
Integrate GRC tooling with security/IT systems via APIs to enable automated data flows, dashboards, and reporting.
Develop and maintain scripts, bots, and workflow tools that automate recurring GRC tasks.
Partner with Security GRC analysts to re-engineer manual processes into scalable automated solutions.
Establish guardrails, testing, and quality controls for AI outputs to ensure accuracy and regulatory compliance.
Monitor and report on performance, reliability, and risk of automation and AI tools in GRC.
Stay current with AI, automation, and GRC tech and recommend new tools and techniques.
Collaborate with other AmexGBT teams to align automation with broader security and compliance goals.