Lead GRC Engineer
Higgsfield2 months ago
Base Salary
$220k - $280k/yr
Responsibilities
- Translate security, privacy, and compliance requirements into technical controls, automated checks, and enforcement mechanisms.
- Build pipelines and integrations that aggregate control, asset, identity, and system data across infrastructure and business systems.
- Create automated control checks, live monitoring, dashboards, alerts, preventative controls, and production release gates.
- Automate evidence collection, control testing, monitoring, exception management, and cross-framework evidence mapping.
- Continuously test control effectiveness and detect control regression or drift.
- Instrument live risk-posture data for security and GRC stakeholders.
- Design AI-assisted and agentic workflows for evidence analysis, control testing, monitoring, and audit-response preparation.
- Help establish the technical evidence base for AI-related certifications and assurance.
- Partner with Security, Engineering, Privacy, Legal, Product, and other teams.
Requirements
- At least 6 years spanning security, GRC, software engineering, automation engineering, or related technical roles.
- Experience translating framework, regulatory, or policy requirements into technical implementations.
- Hands-on experience building or automating security and compliance controls.
- Production-grade scripting or programming experience, such as Python, including API and integration work.
- Strong understanding of SOC 2, ISO 27001, and credible control evidence.
- Ability to assess whether controls are effective, enforced, and continuously monitored.
- Experience building in rapidly changing or 0-to-1 environments.
- Strong judgment regarding automation, risk, exceptions, enforcement, and engineering velocity.
- Ability to communicate technical controls and evidence to auditors, customer security teams, engineers, and nontechnical stakeholders.
Benefits
- Base salary range of $220,000-$280,000 depending on experience, skills, scope, and location.
- Bonus eligibility through the company’s discretionary annual bonus program.
- Stock option program and potential participation in the company’s long-term growth.
- Medical, dental, and vision insurance.
- Competitive 401(k) retirement plan with company matching and additional benefits and perks.
- Professional growth, significant ownership, and direct impact at a rapidly scaling AI company.
- Hybrid work arrangement in the San Francisco Bay Area with three full days per week in the San Francisco office and remaining days remote.
- Expected availability during agreed working hours and sufficient overlap with the relevant team’s time zone.
About Higgsfield
Higgsfield builds generative AI tools for video and image creation used by creators, brands, and social media teams to produce content at scale. The company offers a studio-style app and AI-powered workflows for generation, editing, and marketing automation. Founded in 2023 and headquartered in San Francisco, it is privately held.