Senior Security GRC Engineer: AI‑Driven Automation

American Express Global Business Travel; Salt Lake City (UT); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning & development programs

Inclusion Groups

Job summary

Amex GBT is seeking a Senior Security GRC Engineer in the United States to design and scale AI-enabled automation for governance, risk, and compliance. You will build pipelines, prototype LLM-based solutions, and integrate security tools to drive efficiency across security and business systems.

You will partner with analysts and program managers to re‑engineer manual processes into scalable workflows, while ensuring accuracy, explainability, and regulatory compliance in all outputs.

Qualifications

• Bachelor’s degree in computer science, information security, information systems, or related field.
• 5+ years in security engineering, GRC, or related field with automation/AI experience.
• Strong programming/scripting skills and API/databases/workflow tools.
• Hands-on AI/ML experience (LLMs, generative AI) in business or security use cases.
• Solid understanding of NIST, ISO 27001, SOC 2 and GDPR/PCI-DSS requirements.
• Experience with GRC platforms Onspring/Archer/MetricStream and integration work.
• Risk assessment, control frameworks, and audit evidence familiarity.
• Strong analytical, problem-solving, and communications abilities.

Responsibilities

• Design, build, and maintain automation pipelines for evidence collection and validation.
• Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows.
• Integrate GRC tooling with security/IT systems via APIs for automated data flows.
• Develop scripts, bots, and workflow tools for recurring GRC tasks.
• Collaborate with Security GRC analysts and program managers to re‑engineer processes.
• Establish guardrails, testing, and QA for AI-assisted outputs.
• Monitor performance, reliability, and risk of automation tools.
• Stay current with AI, automation, and GRC tech; suggest improvements.
• Work with security, engineering, data, and business teams to align initiatives.

Skills

Programming/Scripting

AI/ML in GRC

APIs & Data

GRC Tools

Analytical Thinking

Communication Skills

Education

Bachelor’s degree in CS/InfoSec/IS

Tools

Onspring

Archer

MetricStream

Job description

Amex GBT is seeking a Senior Security GRC Engineer in the United States to design and scale AI-enabled automation for governance, risk, and compliance. You will build pipelines, prototype LLM-based solutions, and integrate security tools to drive efficiency across security and business systems.

You will partner with analysts and program managers to re‑engineer manual processes into scalable workflows, while ensuring accuracy, explainability, and regulatory compliance in all outputs.