GRC (Governance, Risk, and Compliance) Engineer

Midcontinent Independent System Operator (MISO)•Carmel, IN

11h•$149,000 - $163,000•Onsite

About The Position

MISO is seeking its first GRC (Governance, Risk, and Compliance) Engineer to establish and strengthen the engineering discipline within its Governance, Risk, and Compliance program. This role is designed to help the organization prepare for expanding cyber responsibilities, emerging technologies such as AI and quantum, and the broader industry shift toward automated GRC engineering. The engineer will focus on automating notifications, reporting, and daily operational workflows to reduce manual effort and increase efficiency. High-priority initiatives will span multiple GRC areas, emphasizing quick-win automation opportunities and building a new annual program from the ground up. As the trusted technical lead, the engineer will guide key decisions, validate solutions, and shape the automation roadmap for a highly visible and high-impact function.

Requirements

Bachelor's degree in Information Security, Cybersecurity, Risk Management, or a related field.
10+ years of professional experience and 4 years of relevant work experience in GRC engineering or a similar role.
Experience writing automation scripts using Python, PowerShell, JavaScript, or similar tools, along with familiarity integrating systems through REST APIs or automation suites.
Ability to work independently, drive initiatives forward, and deliver solutions with minimal direction in a fast-moving environment.
Strong problem-solving mindset with a willingness to build new capabilities, including compliance-as-code or policy-as-code solutions, from the ground up.
Background with Archer or other enterprise GRC platforms, and exposure to risk management, control frameworks, and compliance operations.

Nice To Haves

Advanced degree preferred.

Responsibilities

Design and develop automation that streamlines controls evidence collection, controls testing, and workflow orchestration across the GRC ecosystem.
Build and maintain integrations across GRC platforms, internal systems, and external APIs to support seamless data flow and workflow consistency.
Identify and implement opportunities to reduce manual work, improve process consistency, and support the long-term roadmap for GRC automation capabilities.
Build and maintain automated risk-management processes, including risk intake, scoring, documentation workflows, and continuous monitoring.
Partner with stakeholders to translate complex risk and compliance requirements into scalable, engineered solutions.
Create automation for third-party risk activities such as onboarding, assessments, monitoring, and workflow standardization.
Write automation scripts using languages and tools like Python, PowerShell, JavaScript, and other modern scripting frameworks.