Senior Security GRC Engineer: AI & Automation

American Express; United States; Remote; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Diversity & inclusion

Job summary

Amex GBT is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. You will translate manual processes into automated workflows and collaborate across security and IT teams.

The role emphasizes hands-on engineering, AI/LLMs, and integration with platforms like Onspring, Archer, or MetricStream to modernize the GRC program.

Qualifications

• Bachelor’s degree in computer science, information security, information systems, or related field.
• 5+ years of experience in security engineering, GRC, or related field.
• Hands-on scripting with Python/JavaScript and APIs.
• Experience applying AI/ML (LLMs) to real-world use cases.

Responsibilities

• Design, build, and maintain automation pipelines for collecting and validating evidence across systems.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tooling with security/IT systems via APIs for automated data flows.
• Develop scripts, bots, and workflows to automate recurring GRC tasks.
• Re-engineer manual processes into scalable automation with stakeholders.
• Establish guardrails and quality controls for AI outputs and compliance.

Skills

Python

JavaScript

APIs

Automation

Education

Bachelor's degree

Tools

Onspring

Archer

MetricStream

Job description

Amex GBT is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. You will translate manual processes into automated workflows and collaborate across security and IT teams.

The role emphasizes hands-on engineering, AI/LLMs, and integration with platforms like Onspring, Archer, or MetricStream to modernize the GRC program.