Lead GRC Engineer: AI Security Automation (Hybrid SF)

Higgsfield AI; San Francisco (CA); Hybrid; USD 220,000 - 280,000; Full time

Benefits offered by this job

Stock options

401(k) with company matching

Medical, dental, and vision insurance

Job summary

Higgsfield AI is seeking a Lead GRC Engineer to build the technical foundation of our security and compliance program as we scale. This role translates security, privacy, and compliance requirements into automated controls and monitoring, collaborating with Security, Engineering, Privacy, Legal, and other teams to design future-proof infrastructure.

You will design AI-assisted workflows for evidence analysis, control testing, and audit-response preparation, while integrating with existing

Qualifications

• 6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.
• Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations.
• Hands-on experience personally building or automating security and compliance controls.
• Production-grade scripting or programming experience, such as Python, including working with APIs and integrations.
• Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.
• Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.
• Experience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams.
• Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity.
• Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders.

Responsibilities

• Translate security, privacy, and compliance requirements into technical controls and automated checks.
• Build pipelines that aggregate control and asset data across cloud, IdP, HRIS, CI/CD, and SaaS.
• Turn that data into automated control checks, live monitoring, dashboards, alerts, and audit-ready evidence.
• Create preventative controls and release gates to catch issues before production.
• Design controls that stay effective as teams, locations, vendors, systems, infrastructure, and products evolve.

Skills

Security engineering

GRC

Automation engineering

Software engineering

Cloud security

Risk assessment

Auditing communication

Automation tooling

Policy translation

Tools

Python

Job description

Higgsfield AI is seeking a Lead GRC Engineer to build the technical foundation of our security and compliance program as we scale. This role translates security, privacy, and compliance requirements into automated controls and monitoring, collaborating with Security, Engineering, Privacy, Legal, and other teams to design future-proof infrastructure.

You will design AI-assisted workflows for evidence analysis, control testing, and audit-response preparation, while integrating with existing