← All roles

Member of Technical Staff, Governance, Risk & Compliance (GRC)

Higgsfield AI· Product Engineering
Apply on company site
Hybrid (San Francisco Bay Area, USA)$200k - $300k + equity + bonusFull-timePosted 1mo ago

About the role

Hands-on Member of Technical Staff focused on building and scaling GRC infrastructure to support security, risk, and compliance programs. Translate compliance requirements into automated technical controls, continuous monitoring systems, and preventative security measures.

Responsibilities

  • Translate regulatory and compliance requirements into actionable technical controls across corporate and product infrastructure.
  • Design and implement automated controls for access management, system configurations, security monitoring, and compliance validation.
  • Build preventative controls and release gates that identify and block noncompliant changes before deployment.
  • Evaluate which controls should be automated and where human review remains necessary.
  • Build and maintain scalable GRC infrastructure that supports continuous compliance monitoring and evidence collection.
  • Develop automated workflows to validate control effectiveness and identify compliance gaps in real time.
  • Design controls that remain effective as employees, systems, vendors, locations, and products evolve.
  • Integrate compliance checks into existing engineering workflows, infrastructure, and security tooling.
  • Translate frameworks such as SOC 2, ISO 27001, and other applicable standards into practical engineering requirements.
  • Partner with Security and Engineering to identify control gaps, prioritize risks, and implement sustainable remediation.
  • Establish technical standards and preventative guardrails that reduce reliance on manual compliance processes.
  • Evaluate emerging security and compliance requirements and incorporate them into scalable control designs.
  • Own GRC engineering initiatives from control design through implementation, validation, and ongoing operations.
  • Build automation through scripts, APIs, integrations, and engineering workflows.
  • Partner with technical teams to embed compliance requirements into system architecture and development processes.
  • Help define the long-term GRC infrastructure roadmap to support the company's growth over the next several years.

Qualifications

  • 6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.
  • Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations.
  • Hands-on experience personally building or automating security and compliance controls.
  • Production-grade scripting or programming experience, such as Python, including working with APIs and integrations.
  • Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.
  • Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.
  • Experience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams.
  • Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity.
  • Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders.

Skills

Required:Compliance engineeringAutomation scriptingSecurity frameworks (SOC 2, ISO 27001)

Benefits

  • We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks.
  • The opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team.
  • Significant ownership, direct impact, and opportunities for professional growth as the company scales.
Last updated Oct 25, 2026. Interested? Apply on the company site.
Higgsfield AI logo

About Higgsfield AI

Higgsfield AI — AI-native creative suite

Create images, videos, and voice content with Higgsfield AI from text prompts or references. Edit and upscale media, automate creative workflows with its AI agent, and generate content on web and mobile.

AI-native creative suiteAppsSeedanceSeedreamMCP & CLIGemini Omni FlashCinema StudioOriginal Series
Company profileWebsite

More open roles at Higgsfield AI