Senior GRC Engineer: Risk, Compliance & Automation

ACI Worldwide

Omaha (NE)

Hybrid

USD 120,000 - 190,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

ACI Worldwide is seeking a Senior Risk & Compliance Senior IC for its Global Technology & Innovation organization in a hybrid, mostly office-based role. You will translate regulatory requirements into scalable controls, design automated workflows, and partner with Product, Engineering, Security, Legal, and Audit to embed risk management into technology processes.

The role combines technical governance with leadership, data-driven risk visibility, and collaboration with executives.

Qualifications

Bachelor’s degree in Information Technology, Cybersecurity, Engineering, Risk Management, Compliance, Business, or equivalent experience.
10+ years of experience across technology risk, GRC, cybersecurity, compliance, audit, engineering, or related disciplines.
Strong experience with risk and control assessments, control mapping, control testing, and remediation.
Experience translating regulatory or policy requirements into technology and control requirements.
Demonstrated experience automating governance, risk, security, or compliance processes.
Strong understanding of technology systems, software development, cloud environments, and operational processes.
Ability to analyze data and use it to identify risk, control gaps, and compliance exceptions.
Ability to work directly with engineers, architects, product teams, security professionals, and executives.
Demonstrated ability to operate independently as a senior subject‑matter expert.

Responsibilities

Own and lead the Risk Framework while engineering scalable controls, automated workflows, monitoring, and measurable risk reduction.
Lead risk assessments, issue management, remediation, risk acceptance, operational loss analysis, and control effectiveness assessments.
Translate regulatory, policy, risk, and compliance requirements into practical business, technology, control, evidence, and monitoring requirements.
Design, test, challenge, and continuously improve preventive and detective controls, replacing manual controls with automated controls where practical. Automate control execution, evidence collection, testing, monitoring, exception management, reporting, and compliance checks.
Partner with business, Product, Engineering, Operations, Security, Compliance, Legal, ERM, and Internal Audit to embed risk and compliance into technology and business processes.
Identify emerging operational, technology, security, privacy, regulatory, compliance, and resilience risks and drive appropriate remediation.
Use data, KPIs, KRIs, dashboards, and control-health measures to improve risk visibility, reporting, and decision‑making.
Lead risk-based testing and validate that remediation and implemented solutions sufficiently address identified risks.
Evaluate governance processes for simplification, standardization, improvement, or automation.
Provide senior risk and compliance advisory support while directly challenging control design and influencing technology and business decisions.
Support executive and Board reporting while reducing reliance on manually prepared governance reporting.
Operate as a senior individual contributor and trusted risk SME, using technical expertise, independent judgment, influence, and cross‑functional leadership.