Senior Security GRC Engineer — AI & Automation

American Express Global Business Travel; Juneau (AK); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Access to 20,000 courses

Job summary

Amex GBT is seeking a Senior Security GRC Engineer in the United States to design and scale automation and AI-driven GRC workflows. You will translate manual processes into automated data-driven pipelines, leveraging AI to improve control coverage and risk analysis.

The role requires hands-on engineering with expertise in Python/JavaScript, APIs, and GRC platforms. You will collaborate across security and business teams to advance automation maturity in a fast-paced environment.

Qualifications

• Bachelor’s degree or equivalent experience in CS or related field.
• 5+ years in security engineering, GRC, or related area with automation/AI experience.
• Strong programming/scripting skills and API experience.
• Hands-on AI/LLMs experience applied to real-world use cases.
• Knowledge of NIST, ISO 27001, SOC 2 and GDPR/PCI DSS.
• Experience with GRC platforms (Onspring/Archer/MetricStream) and integration work.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Design, build, and maintain automation pipelines for evidence collection and validation.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tooling with security/IT systems via APIs for dashboards and reporting.
• Develop scripts, bots, and tools to automate recurring GRC tasks.
• Partner with analysts and managers to re-engineer manual processes into scalable automation.
• Establish guardrails and testing to ensure AI outputs are accurate and compliant.
• Monitor performance and risk posture of automation and AI tools.
• Stay current with AI/automation technologies and recommend adoption.
• Collaborate with security, engineering, data, and business teams on goals.

Skills

Python

JavaScript

APIs

Automation

AI/LLMs

GRC

Security engineering

Data reporting

Analytics

Education

Bachelor's degree in CS or related field

Tools

Onspring

Archer

MetricStream

Job description

Amex GBT is seeking a Senior Security GRC Engineer in the United States to design and scale automation and AI-driven GRC workflows. You will translate manual processes into automated data-driven pipelines, leveraging AI to improve control coverage and risk analysis.

The role requires hands-on engineering with expertise in Python/JavaScript, APIs, and GRC platforms. You will collaborate across security and business teams to advance automation maturity in a fast-paced environment.