GRC (Governance, Risk, and Compliance) Engineer

About the role

MISO is seeking its first GRC (Governance, Risk, and Compliance) Engineer to establish and strengthen the engineering discipline within our Governance, Risk, and Compliance program. This role will help the organization prepare for expanding cyber responsibilities, emerging technologies such as AI and quantum, and the broader industry shift toward automated GRC engineering. You will focus on automating notifications, reporting, and daily operational workflows to reduce manual effort and increase efficiency. High-priority initiatives will span multiple GRC areas, emphasizing quick-win automation opportunities and building a new annual program from the ground up. As the trusted technical lead, you will guide key decisions, validate solutions, and shape the automation roadmap for a highly visible and high-impact function.

Responsibilities

• Design and develop automation that streamlines controls evidence collection, controls testing, and workflow orchestration across the GRC ecosystem.
• Build and maintain integrations across GRC platforms, internal systems, and external APIs to support seamless data flow and workflow consistency.
• Identify and implement opportunities to reduce manual work, improve process consistency, and support the long-term roadmap for GRC automation capabilities.
• Build and maintain automated risk-management processes, including risk intake, scoring, documentation workflows, and continuous monitoring.
• Partner with stakeholders to translate complex risk and compliance requirements into scalable, engineered solutions.
• Create automation for third-party risk activities such as onboarding, assessments, monitoring, and workflow standardization.
• Write automation scripts using languages and tools like Python, PowerShell, JavaScript, and other modern scripting frameworks.

Requirements

• Bachelor's degree in Information Security, Cybersecurity, Risk Management, or a related field. Advanced degree preferred.
• 10+ years of professional experience and 4 years of relevant work experience in GRC engineering or a similar role.
• Experience writing automation scripts using Python, PowerShell, JavaScript, or similar tools, along with familiarity integrating systems through REST APIs or automation suites.
• Ability to work independently, drive initiatives forward, and deliver solutions with minimal direction in a fast-moving environment.
• Strong problem-solving mindset with a willingness to build new capabilities, including compliance-as-code or policy-as-code solutions, from the ground up.
• Background with Archer or other enterprise GRC platforms, and exposure to risk management, control frameworks, and compliance operations.

Skills

• JavaScript: Advanced
• PowerShell: Advanced
• Python: Advanced

Pay

The base salary compensation range for this role is $149,000 - $163,000 USD annually. Base salary range is included in accordance with requirements of various state/local pay transparency legislation. Salaries may vary based on factors such as location, individual competencies, education, professional certifications, and qualifications/experience. The position is also eligible for an annual bonus if individual performance and company objectives are met.

Benefits

• Comprehensive benefits package
• 401k
• Vacation, sick, and safe time available on your first day of employment