Risk Automation Engineer

June 3, 2026

Other Jobs To Apply

No other job posts for this day.

Basic Function Lumin Digital is looking for a Risk Automation Engineer who will fundamentally reimagine how risk management operates in a cloud-native, infrastructure-as-code environment. This role exists because traditional GRC processes (spreadsheet-driven assessments, manual remediation tracking, and documentation-heavy workflows) cannot keep pace with the velocity at which our technology evolves. The Risk Automation Engineer will design, build, and operate secure, agentic automation pipelines that handle risk and vendor lifecycle processes end-to-end, eliminating manual handoffs wherever human judgment is not required. Success in this position means Lumin’s risk posture is visible in near real time, risk processes are self-service and self-documenting, and the broader Risk Management team spends its time on strategic decisions rather than procedural coordination. This person will teach us what’s possible, not wait to be taught. Essential Functions and Responsibilities: <ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Architect and build lights-off automation pipelines that orchestrate the full risk assessment lifecycle—from intake and scoping through evidence collection, control testing, findings generation, and remediation tracking—using AI-driven agentic workflows and tools such as Claude Code. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Design and implement automated vendor risk lifecycle management, including onboarding questionnaires, periodic reassessment triggers, continuous monitoring integrations, and contract-driven offboarding workflows that require zero manual coordination for routine vendor tiers. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Build and maintain near-real-time risk posture dashboards and reporting pipelines that programmatically aggregate data from cloud infrastructure, security tooling, vulnerability scanners, and GRC platforms to give leadership continuous visibility into the organization’s evolving risk landscape. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Develop secure agentic AI pipelines that autonomously triage, classify, and route risk-related tasks—escalating to human reviewers only when decisions exceed defined confidence thresholds or policy boundaries. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Engineer integrations between GRC platforms, cloud and vendor provider APIs, CI/CD pipelines, and internal systems to enable continuous control monitoring and evidence collection that replaces periodic, manual audit preparation. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Eliminate procedural ambiguity by codifying risk management processes into self-service, event-driven workflows so that stakeholders across the enterprise never need to ask how to initiate or proceed through a risk or vendor process. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Apply security-first engineering practices to all automation, including secrets management, least-privilege access, audit logging, input validation, and guardrails on AI agent behavior to ensure automated pipelines operate within defined trust boundaries. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Serve as an internal force multiplier by introducing and evangelizing AI-assisted engineering practices, including prompt engineering, agentic tool use, and LLM-powered code generation, to uplevel the capabilities of the broader Risk and Compliance teams. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Perform other duties as assigned. </li> </ul> Physical Demands: <ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> While performing the duties of this Job, the employee is regularly required to sit; use hands to type, handle, or feel and talk or hear </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Specific vision abilities required by this job include close vision </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Ability to occasionally lift/move up to 25 pounds </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Individuals with a disability who are otherwise able to perform the essential functions of the job may request reasonable accommodation through the Human Resources department. </li> </ul> Supervisory Responsibility: <ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"> <li style="font-size: 11pt; font-family: 'Anek Latin', sans-serif; color: #002429; font-weight: 300;"> None. </li> </ul> Position Specifications Education: <ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related field; or equivalent combination of education and demonstrated engineering experience in integration and automation. </li> <li style="font-size: 11pt; font-family: 'Anek Latin', sans-serif; color: #021b1f; font-weight: 300;"> Relevant certifications valued but not required (e.g., AWS Solutions Architect, CRISC, CISSP, or equivalent cloud/security credentials) </li> </ul> Experience: <ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> 5+ years of hands-on software engineering, DevOps, or security automation experience in production environments </li> <li style="font-size: 11pt; font-family: 'Anek Latin', sans-serif; color: #021b1f; font-weight: 300;"> 2+ years working in or directly supporting risk management functions or GRC operations </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Demonstrated experience building and shipping automation pipelines in production environments using Python, Go, Bash, or similar languages, with infrastructure-as-code tools such as Terraform. </li> <li style="font-size: 11pt; font-family: 'Anek Latin', sans-serif; color: #021b1f; font-weight: 300;"> Track record of using AI/LLM tools (e.g., Claude Code, GitHub Copilot, or equivalent) to accelerate engineering output and build agentic or semi-autonomous workflows </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Experience with risk registers and GRC platforms (e.g., Archer, ServiceNow, TrustCloud, Vanta, Drata, Hyperproof) and the ability to integrate them programmatically into automated workflows. </li> </ul> Knowledge, Skills, & Abilities: <ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Working understanding of risk management frameworks (NIST CSF, PCI DSS, ISO 27001, SOC 2, FFIEC) and how controls map to technical implementations </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Proficiency with AI-assisted development tools (Claude Code, GitHub Copilot, or similar agentic coding assistants) and the ability to design, prompt-engineer, and orchestrate AI agents for security automation workflows. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Strong proficiency in Python, Go, or TypeScript with the ability to ship production-grade code independently </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Deep working knowledge of cloud platforms (AWS preferred), including IAM, Lambda, Step Functions, EventBridge, API Gateway, and related serverless/event-driven services </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Strong software engineering fundamentals: version control (Git), code review, testing, CI/CD, API design, and the ability to write production-quality, maintainable code—not just scripts. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Strong systems-thinking mindset with the ability to see across organizational silos and design automation that accounts for process dependencies, edge cases, and failure modes </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Familiarity with security data engineering concepts: API and database integration, data normalization, and building automated evidence-collection pipelines for compliance and audit support. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Excellent written and verbal communication skills, with the ability to translate complex automation architectures into clear documentation, runbooks, and knowledge-transfer materials for cross-functional teams. </li> <li style="font-size: 11pt; font-family: Arial, sans-serif; color: #021b1f;"> Self-directed engineering mindset with a bias toward action, a low tolerance for manual toil, and a drive to eliminate recurring work through automation. You see a repeated manual process as a bug, not a task. </li> </ul> Travel: <ul style="margin-top: 0px; margin-bottom: 0px; padding-inline-start: 48px;"> <li style="font-size: 11pt; font-family: 'Anek Latin', sans-serif; color: #021b1f; font-weight: 300;"> Minimal, generally 12 days or less per year, ~2X team get-togethers a year </li> </ul> <div>$165,000 - $185,000 a year</div> LIFE AT LUMIN DIGITAL Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people. We empower credit unions and banks by creating cutting-edge digital experiences that continuously serve, engage, and grow their membership base — and as a 100% cloud-native company, we're purpose-built to unlock the full advantages of the cloud for financial institutions and their users. At Lumin, we thrive on curiosity and innovation. Our culture is built on trust in our expertise and decisions, respect for diverse perspectives and talents, and boldness in pursuing new ideas. These values shape a workplace where collaboration thrives, ideas flourish, and new possibilities are discovered every day. We encourage our team to explore, experiment, and challenge the status quo — because continuous improvement isn't just a goal, it's how we operate. Benefits include: We take care of our people with medical, dental, and vision insurance, a 401(k) with company match, flexible PTO plus 12 paid holidays, paid sick leave, and paid parental and family leave. We also offer a lifestyle spending account, tuition reimbursement, and a cell phone stipend. Additional details are provided during the interview process. Lumin Digital is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other legally protected basis. For more information, visit<a href="http://lumindigital.com" style="text-decoration: none;"> lumindigital.com</a>.

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

DISCLAIMER