Member of Technical Staff, Governance, Risk & Compliance (GRC)

present of AI; San Francisco (CA); Remote; USD 180,000 - 240,000; Full time

Job summary

Higgsfield is seeking a Senior Member of Technical Staff for Governance, Risk & Compliance to turn SOC 2 and ISO 27001 into automated checks, release gates, and live monitoring. This hands-on engineering role requires about six years in security, GRC, or software, and strong Python production-quality skills.

Remote-friendly in the San Francisco Bay Area, the position emphasizes judgment alongside code, including deciding what to automate, what needs human review, and how to evidence controls to

Qualifications

• Six years of security, GRC, or software experience.
• Writes production-quality Python code.
• Has built controls and implemented automated checks, release gates, and live monitoring.

Responsibilities

• Turn compliance standards like SOC 2 and ISO 27001 into automated checks, release gates and live monitoring.
• Automate evidence collection with scripts and APIs, and ensure controls are current as products evolve.

Skills

Python automation

SOC 2 mapping

ISO 27001 mapping

Tools

APIs

Automation scripts

Job description

Member of Technical Staff, Governance, Risk & Compliance (GRC)

Finance & Legal · San Francisco Bay Area, USA · Remote · FullTime · Senior level

This is a hands‑on engineering role that turns compliance standards like SOC 2 and ISO 27001 into automated checks, release gates, and live monitoring. A strong candidate has about six years in security, GRC, or software work, writes production-quality Python, and has built controls rather than only documented them. Judgment matters as much as code: knowing which controls to automate, which need a human, and which ones truly work in practice.

How it fits the AI era

AI can speed up the routine parts of this work, such as gathering evidence, flagging configuration drift, and drafting control mappings. The harder parts stay human: deciding what risk is acceptable, handling exceptions, and explaining evidence to auditors and customer security teams. At a company that generates video and images at large scale, the role also means keeping controls current as products and systems change quickly.

How it builds AI experience

Working at a company built around generative AI means applying compliance controls to a product that runs millions of generations a day, which is a useful setting to learn how AI services are secured and governed. To build related experience, practice automating evidence collection with scripts and APIs, and read up on how security standards are being applied to AI systems and user content.

Worth showing

• Python automation with APIs
• SOC 2 and ISO 27001 mapping

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Higgsfield

Higgsfield is an AI-native creative suite that generates cinematic-quality video and images from text, image, or link inputs, per the company.