Senior Security GRC Engineer: AI-Driven Automation

American Express Global Business Travel; Helena (MT); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Access to 20,000 courses on learning平台

Job summary

Amex GBT is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. The role sits at the intersection of security engineering and GRC, transforming manual, evidence-heavy processes into automated, data-driven workflows.

The ideal candidate blends hands-on engineering with strong GRC knowledge, applying AI/automation to reduce risk and improve control coverage, while aligning with regulatory and audit requirements

Qualifications

• Bachelor’s degree or equivalent experience in a relevant field.
• 5+ years of experience in security engineering, GRC, or related field with automation/AI experience.
• Strong programming/scripting skills and API/databases/workflow experience.
• Hands‑on AI/ML (LLMs) experience applied to business/security use cases.
• Knowledge of cybersecurity frameworks (NIST, ISO 27001, SOC 2) & regulatory requirements (GDPR, PCI DSS).
• Experience with GRC platforms Onspring/Archer/MetricStream or similar.
• Familiarity with risk assessment, control frameworks, and audit evidence needs.
• Strong analytical and communication skills for stakeholder impact.

Responsibilities

• Design, build, and maintain automation pipelines for GRC evidence collection and validation.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tooling with security/IT systems via APIs for automated data flows and dashboards.
• Develop scripts, bots, and workflows to automate recurring GRC tasks.
• Partner with analysts and managers to re‑engineer manual processes into scalable automation.
• Establish guardrails and testing to ensure AI outputs are accurate and compliant.
• Monitor performance and risk posture of automation/AI tools in GRC.
• Stay updated on AI, automation, and GRC tech; recommend new tools.
• Collaborate with security, engineering, data, and business teams.

Skills

Python

JavaScript

APIs

AI/ML

GRC automation

Security engineering

Problem solving

Communication

Automation tooling

5+ years experience

Education

Bachelor’s degree in computer science, information security, information systems, or related field

Tools

Onspring

Archer

MetricStream

Job description

Amex GBT is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance. The role sits at the intersection of security engineering and GRC, transforming manual, evidence-heavy processes into automated, data-driven workflows.

The ideal candidate blends hands-on engineering with strong GRC knowledge, applying AI/automation to reduce risk and improve control coverage, while aligning with regulatory and audit requirements