Senior GRC Engineer – Automation & Controls

Higgsfield AI; San Francisco (CA); Hybrid; USD 200,000 - 300,000; Full time

Benefits offered by this job

Base salary $200k–$300k

Bonus eligible

Stock options

Medical, dental, vision insurance

401(k) with company match

Hybrid work in SF Bay Area

Job summary

Higgsfield AI is seeking a hands-on Member of Technical Staff, GRC Engineering, to build scalable compliance infrastructure. You will translate regulatory requirements into automated technical controls and continuous monitoring, collaborating with Security, Engineering, IT, and cross-functional teams.

As the company grows, you’ll design and implement controls that prevent noncompliant changes and embed checks into development workflows, ensuring scalable, auditable evidence across environments.

Qualifications

• 6+ years in security, GRC, or related technical roles.
• Experience turning regulatory requirements into technical controls.
• Hands-on building security and compliance automation.
• Python scripting with API integrations.
• Knowledge of SOC 2 and ISO 27001 frameworks.
• Ability to evaluate control effectiveness and enforcement.
• Experience in fast-moving 0→1 environments.
• Judgment on automation, risk, and velocity.
• Ability to communicate controls to auditors and engineers.

Responsibilities

• Translate regulatory requirements into technical controls across infrastructure.
• Design automated controls for access management and configurations.
• Build preventative controls and release gates to block noncompliance.
• Evaluate what to automate vs. requires human review.
• Develop continuous monitoring and evidence collection systems.
• Integrate compliance checks into existing engineering workflows.

Skills

GRC engineering

Compliance frameworks

Automation engineering

Python scripting

Security risk

Audits communication

Rapid growth work

Job description

Higgsfield AI is seeking a hands-on Member of Technical Staff, GRC Engineering, to build scalable compliance infrastructure. You will translate regulatory requirements into automated technical controls and continuous monitoring, collaborating with Security, Engineering, IT, and cross-functional teams.

As the company grows, you’ll design and implement controls that prevent noncompliant changes and embed checks into development workflows, ensuring scalable, auditable evidence across environments.