Senior Security GRC Engineer - AI-Driven Automation

American Express Global Business Travel

United States

On-site

USD 104,000 - 194,000

Full time

3 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Health and welfare insurance

Retirement program

Parental leave

Adoption assistance

Wellbeing resources

Travel perks

Job summary

Amex GBT is seeking a Senior Security GRC Engineer to design, build, and scale automation and AI-driven solutions for governance, risk, and compliance in a US-based role. You will translate manual processes into data-driven workflows and partner with security teams to reduce risk and improve control coverage.

The role requires strong programming, AI/LLM experience, and knowledge of NIST, ISO 27001, SOC 2, GDPR, and PCI DSS.

Qualifications

Bachelor's degree in CS or related field.
5+ years in security engineering, GRC, or related field.
Strong programming skills and API experience.
Hands-on AI/ML experience with LLMs in business use cases.
Knowledge of NIST, ISO 27001, SOC 2 and GDPR/PCI DSS.
Experience configuring or integrating GRC platforms.

Responsibilities

Design, build, and maintain automation pipelines for evidence collection and validation across security and business systems.
Prototype and deploy AI/LLM-based solutions to accelerate GRC workflows like testing and policy mapping.
Integrate GRC tooling with security/IT systems via APIs for automated data flows and dashboards.
Develop scripts, bots, and workflows to automate recurring GRC tasks.
Collaborate with analysts and program managers to reengineer processes into scalable automation.
Establish guardrails, testing, and quality controls for AI outputs to stay compliant.
Monitor performance, reliability, and risk of automation and AI tools in GRC.
Stay updated on AI/automation trends and advocate new tools to improve maturity.