Lead GRC Engineer: AI-Driven Security Automation

Higgsfield; San Francisco (CA); Hybrid; USD 220,000 - 280,000; Full time

Benefits offered by this job

Stock options

Discretionary annual bonus

Medical, dental, vision insurance

401(k) with company match

Hybrid work — SF Bay Area 3 days/week

Job summary

Higgsfield AI in the San Francisco Bay Area is seeking a Lead GRC Engineer to build the security and compliance foundation as Higgsfield scales. You translate requirements into automated, auditable controls and design AI-native GRC workflows.

You will collaborate with Security, Engineering, Privacy, Legal, and other teams to build scalable infrastructure across cloud, IdP, HRIS, CI/CD, and SaaS platforms, delivering live monitoring, evidence, and ongoing assurance.

Qualifications

• 6+ years in security, GRC, software engineering, automation engineering, or related technical roles.
• Hands-on experience translating framework, regulatory, or policy requirements into technical implementations.
• Production-grade scripting or programming experience, e.g., Python, including working with APIs and integrations.
• Strong understanding of SOC 2 and ISO 27001 and what constitutes credible control evidence.

Responsibilities

• Translate security, privacy, and compliance requirements into technical controls, automated checks, and enforcement mechanisms.
• Build pipelines and integrations that aggregate control, asset, identity, and system data across cloud infrastructure, IdP, HRIS, source control, CI/CD, and SaaS applications.
• Turn data into automated control checks, live monitoring, dashboards, alerts, and audit-ready evidence.
• Build preventative controls and release gates that identify or block security and privacy issues before they reach production.
• Design controls that remain effective as employees, locations, vendors, systems, infrastructure, and products change.

Skills

Security & GRC

Automation engineering

Python scripting

APIs & integrations

Cloud infrastructure

SOC 2 / ISO 27001

Tools

CI/CD pipelines

Job description

Higgsfield AI in the San Francisco Bay Area is seeking a Lead GRC Engineer to build the security and compliance foundation as Higgsfield scales. You translate requirements into automated, auditable controls and design AI-native GRC workflows.

You will collaborate with Security, Engineering, Privacy, Legal, and other teams to build scalable infrastructure across cloud, IdP, HRIS, CI/CD, and SaaS platforms, delivering live monitoring, evidence, and ongoing assurance.