Member of Technical Staff, Governance, Risk & Compliance (GRC)

The role

You will build and scale technical infrastructure for security, risk, and compliance programs. This role involves translating compliance requirements into automated technical controls and continuous monitoring systems.

What you will do

• Translate regulatory and compliance requirements into actionable technical controls.
• Design and implement automated controls for access management, system configurations, security monitoring, and compliance validation.
• Build preventative controls and release gates.
• Build and maintain scalable GRC infrastructure for continuous compliance monitoring and evidence collection.
• Develop automated workflows to validate control effectiveness and identify compliance gaps.
• Integrate compliance checks into existing engineering workflows, infrastructure, and security tooling.
• Translate frameworks such as SOC 2 and ISO 27001 into practical engineering requirements.
• Partner with Security and Engineering to identify control gaps and implement remediation.
• Own GRC engineering initiatives from design through implementation and operations.
• Build automation through scripts, APIs, integrations, and engineering workflows.

Required qualifications

• 6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.
• Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations.
• Hands-on experience personally building or automating security and compliance controls.
• Production-grade scripting or programming experience, such as Python, including working with APIs and integrations.
• Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.
• Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.
• Experience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams.
• Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity.
• Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders.

Benefits

• Medical, dental, and vision insurance
• Competitive 401(k) retirement plan with company matching
• Additional benefits and perks

About the company

Higgsfield AI is a generative AI company building AI-powered video creation and next-generation creative tools. It has 30M+ users worldwide and powers 390 of Fortune 500 brands.