Senior Security GRC Engineer: AI & Automation

American Express Global Business Travel; Augusta (ME); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks for the team

Learning platform access and courses

Job summary

Amex GBT is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. You will transform manual, evidence-heavy processes into automated, data-driven workflows that reduce risk and improve control coverage.

You will develop and maintain automation pipelines, prototype AI/LLM solutions, and integrate with GRC platforms to enable dashboards and reporting.

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• 5+ years in security engineering, GRC, or similar with automation/AI experience.
• Strong programming/scripting skills (Python/JavaScript) and API/workflow automation
• Hands-on AI/ML experience (LLMs, generative AI) in business or security
• Knowledge of NIST, ISO 27001, SOC 2 and GDPR/PCI-DSS requirements
• Experience configuring/integrating GRC platforms such as Onspring/Archer/MetricStream

Responsibilities

• Design, build, and maintain automation pipelines for collecting and validating evidence.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tooling with systems via APIs for automated data flows and reporting.
• Develop scripts, bots, and tools to automate recurring GRC tasks.
• Collaborate with analysts and program managers to automate manual processes.
• Establish guardrails and testing to ensure AI outputs are accurate and compliant.
• Monitor performance and risk posture of automation and AI tools.
• Stay current with AI/automation tech and recommend new tools.
• Coordinate with security, engineering, data, and business teams on automation agendas.

Skills

Security engineering

GRC experience

Python/JavaScript scripting

APIs & automation

AI/ML for GRC

Regulatory frameworks knowledge

Education

Bachelor’s degree in CS or related field

Tools

Onspring

Archer

MetricStream

Job description

Amex GBT is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. You will transform manual, evidence-heavy processes into automated, data-driven workflows that reduce risk and improve control coverage.

You will develop and maintain automation pipelines, prototype AI/LLM solutions, and integrate with GRC platforms to enable dashboards and reporting.