AI Automation Architect

Berkley•Wilmington, DE

8d•Onsite

About The Position

The AI Automation Architect designs, builds, and maintains the automation and AI-enabled capabilities that make Berkley’s Governance, Risk & Compliance (GRC) function faster, more consistent, and more audit-ready. The role turns manual, repetitive compliance work — evidence collection, control testing support, exception handling, and reporting — into governed, automated workflows, freeing IT Compliance and operating-unit personnel to focus on judgment, risk decisions, and control ownership. Working within IT GRC and in close partnership with Information Security, Internal Audit, and the operating units, the engineer builds automations on the enterprise GRC platform (ServiceNow GRC/IRM and Archer), integrates control and evidence data across systems, and applies AI responsibly to accelerate compliance activities. Consistent with BTS’s “security-first” and “use AI to work smarter” principles, this position acts as a force multiplier for the compliance team rather than a replacement for it — accountability, oversight, and risk acceptance remain with people.

Requirements

Hands-on automation building. Demonstrated experience turning manual, fragmented processes into engineered, automated workflows — with concrete examples of automations built and shipped, not just advised on.
Programming and scripting. Proficiency in Python and comfort building and consuming APIs / REST integrations to move and connect data across systems.
Workflow and integration tooling. Practical experience with workflow-automation and orchestration tools, plus building reusable pipelines and integrations that others can consume.
Applied AI judgment. Working experience with applied AI — agents, retrieval-augmented generation (RAG), and LLM-assisted workflows — and sound judgment on when AI adds value versus when deterministic automation is the better choice.
Data engineering fluency. Ability to structure, transform, and move data reliably across systems as the foundation for automation.
Security-first mindset. Designs with security, oversight, and accountability in mind; keeps human judgment and review in the loop where it matters.
Communication. Can explain technical work clearly to non-technical stakeholders and leadership.
Autonomy and influence. Comfortable operating with significant autonomy and influencing adoption across teams without direct authority.
Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field — or equivalent practical experience.
Several years of hands-on experience in software/automation engineering, data/integration engineering, or applied AI, including delivery of production-grade automation.

Nice To Haves

Security domain exposure. Familiarity with one or more security domains — identity, cloud security, GRC, security operations, or AI security.
Cloud and sandbox experience. Experience working in Azure and building or operating in lab / sandbox environments.
Reusable patterns and standards. Track record of creating reusable automation patterns, reference designs, or standards that scale across multiple teams or business units.
Coaching orientation. A force-multiplier, coaching-oriented style that raises the whole team’s leverage rather than centralizing all delivery on one person.
Enterprise scale. Experience delivering solutions adopted broadly across a large or distributed organization.

Responsibilities

Design, develop, and maintain GRC automations and AI-enabled solutions that streamline compliance processes, ensuring each solution complies with security, privacy, and governance requirements.
Automate the collection, validation, and packaging of control evidence for SOX, NYDFS Part 500, and internal control assessments — reducing manual gathering and improving completeness and consistency.
Build and improve exception intake, routing, reporting, and dashboards within ServiceNow GRC/IRM and Archer; support the migration of GRC processes onto the strategic platform.
Integrate control, risk, and evidence data across GRC, ITSM, identity, and security tooling via APIs and connectors to create reliable, reusable data pipelines and reporting.
Apply AI responsibly to draft first-pass control narratives, summarize findings, map controls to frameworks (NIST CSF 2.0, NYDFS Part 500), and accelerate analysis — with human review retained for all decisions.
Create and maintain clear process and technical documentation for every automation, including run books, data lineage, and control mappings, so solutions remain auditable and supportable over time.
Implement a security-first practice, embedding least-privilege access, logging, and change-control into every automation; ensure AI and automation use aligns with the company AI Policy and GRC governance.
Partner with IT Compliance analysts, Internal Audit, InfoSec, and OU compliance personnel to identify high-value automation opportunities, gather requirements, and drive adoption of delivered capabilities.