Lead AI GRC Engineer — Automated Controls & Compliance

Menlo Ventures; San Francisco (CA); Hybrid; USD 220,000 - 280,000; Full time

Benefits offered by this job

Equity

Annual bonus program

Medical, dental, and vision insurance

401(k) with company match

Career growth opportunities

Job summary

Higgsfield AI is seeking a Lead GRC Engineer to build the technical backbone of our security and compliance program as we scale. You will translate security, privacy, and compliance requirements into automated, auditable controls and integrate data across cloud, IdP, HRIS, and CI/CD ecosystems.

You will collaborate with Security, Engineering, Privacy, and Legal to design controls that stay effective as our environment evolves, and to implement live monitoring, dashboards, and audit-ready

Qualifications

• 6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.
• Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations.
• Hands-on experience personally building or automating security and compliance controls.
• Production-grade scripting or programming experience, such as Python, including working with APIs and integrations.
• Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.
• Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.
• Experience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams.
• Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity.
• Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders.

Responsibilities

• Translate security, privacy, and compliance requirements into technical controls, automated checks, and enforcement mechanisms.
• Build pipelines and integrations that aggregate control, asset, identity, and system data across cloud infrastructure, IdP, HRIS, source control, CI/CD, and SaaS applications.
• Turn that data into automated control checks, live monitoring, dashboards, alerts, and audit-ready evidence.
• Build preventative controls and release gates that identify or block security and privacy issues before they reach production.
• Design controls that remain effective as our employees, locations, vendors, systems, infrastructure, and products rapidly change.
• Build a unified controls approach where evidence can be collected once and mapped across multiple frameworks and requirements.
• Automate evidence collection, control testing, monitoring, and exception management rather than relying on point-in-time reviews.
• Integrate with systems and controls already owned by Security, Engineering, IT, and other teams rather than creating parallel processes.
• Continuously test whether controls are actually working and detect when they regress or drift.
• Instrument control effectiveness so security and GRC stakeholders can understand risk posture from live data rather than periodic assessments.
• Design agentic and AI-assisted workflows for evidence analysis, control testing, monitoring, and audit-response preparation.
• Apply strong judgment around what can be delegated to AI, what requires human review, and how both should be evidenced.
• Help build the technical evidence base for AI-related certifications and assurance, including areas such as agent activity, evaluations, tool restrictions, and failure modes.
• Partner with Product and Engineering as AI assurance standards and customer expectations continue to evolve.

Skills

Security engineering

GRC

Automation engineering

Python scripting

APIs & integrations

Cloud infrastructure

Risk assessment

Automation judgment

Auditor communication

Tools

CI/CD

IdP

HRIS

Job description

Higgsfield AI is seeking a Lead GRC Engineer to build the technical backbone of our security and compliance program as we scale. You will translate security, privacy, and compliance requirements into automated, auditable controls and integrate data across cloud, IdP, HRIS, and CI/CD ecosystems.

You will collaborate with Security, Engineering, Privacy, and Legal to design controls that stay effective as our environment evolves, and to implement live monitoring, dashboards, and audit-ready