{"id":216646,"url":"https://alion.io/job/higgsfield-lead-grc-engineer","title":"Member of Technical Staff, Governance, Risk & Compliance (GRC)","company":{"id":66037,"name":"Higgsfield","domain":"higgsfield.ai","url":"https://alion.io/company/higgsfield","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":81,"open_postings":13,"ghost_share":0,"stale_share":0.769,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-11-03T05:54:40Z"}},"role":"AI/ML","role_family":"AI/ML","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":200000,"max":300000,"currency":"USD","period":"year","gross":null,"usd_annual":300000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Design Controls","optional":false},{"name":"ISO 27001","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-28T11:45:49Z","employer_posted_date":"2026-08-28","last_verified_at":"2026-11-03T09:12:25Z","board_verified":true,"closed_at":null,"days_open":66,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":66},"description":"Why work at Higgsfield AI?\nHiggsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.\nWe're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.\nAbout the role:\nHiggsfield AI is looking for a hands-on Member of Technical Staff, GRC Engineering to build and scale the technical infrastructure supporting our security, risk, and compliance programs.\nAs we scale globally, you'll translate compliance requirements into automated technical controls, continuous monitoring systems, and preventative security measures that evolve alongside our business.\nWorking closely with Security, Engineering, IT, and cross-functional teams, you'll design and implement controls that proactively prevent compliance gaps rather than simply identifying them during audits. This is a technical engineering role focused on building scalable GRC infrastructure, not traditional policy management or audit coordination.\nWe're looking for someone who combines strong knowledge of compliance frameworks with technical problem-solving skills, sound judgment, and the ability to build systems that support a rapidly growing organization.\nWhat You'll Do\nCompliance Engineering & Control Automation\nTranslate regulatory and compliance requirements into actionable technical controls across corporate and product infrastructure.\n\nDesign and implement automated controls for access management, system configurations, security monitoring, and compliance validation.\n\nBuild preventative controls and release gates that identify and block noncompliant changes before deployment.\n\nEvaluate which controls should be automated and where human review remains necessary.\n\nGRC Infrastructure & Continuous Monitoring\nBuild and maintain scalable GRC infrastructure that supports continuous compliance monitoring and evidence collection.\n\nDevelop automated workflows to validate control effectiveness and identify compliance gaps in real time.\n\nDesign controls that remain effective as employees, systems, vendors, locations, and products evolve.\n\nIntegrate compliance checks into existing engineering workflows, infrastructure, and security tooling.\n\nRisk Management & Security Controls\nTranslate frameworks such as SOC 2, ISO 27001, and other applicable standards into practical engineering requirements.\n\nPartner with Security and Engineering to identify control gaps, prioritize risks, and implement sustainable remediation.\n\nEstablish technical standards and preventative guardrails that reduce reliance on manual compliance processes.\n\nEvaluate emerging security and compliance requirements and incorporate them into scalable control designs.\n\nTechnical Ownership & Collaboration\nOwn GRC engineering initiatives from control design through implementation, validation, and ongoing operations.\n\nBuild automation through scripts, APIs, integrations, and engineering workflows.\n\nPartner with technical teams to embed compliance requirements into system architecture and development processes.\n\nHelp define the long-term GRC infrastructure roadmap to support the company's growth over the next several years.\n\nRequirements:\n6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.\n\nDemonstrated experience translating framework, regulatory, or policy requirements into technical implementations.\n\nHands-on experience personally building or automating security and compliance controls.\n\nProduction-grade scripting or programming experience, such as Python, including working with APIs and integrations.\n\nStrong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.\n\nAbility to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.\n\nExperience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams.\n\nStrong judgment around automation, risk, exceptions, enforcement, and engineering velocity.\n\nAbility to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders.\n\nCompensation & Benefits\nWe offer a competitive and thoughtfully structured compensation package designed to align with impact, experience, and long-term growth.\n\nBase Salary: The anticipated salary range for this role is $200,000 - $300,000, depending on experience, skills, scope, and location.\n\nBonus: This role is Bonus eligible and may participate in the Company's discretionary annual bonus program.\n\nEquity: In addition to cash compensation, employees are eligible to participate in the company’s stock option program and share in Higgsfield’s long-term growth.\n\nBenefits: We offer a comprehensive benefits package designed to support employees professionally and personally, including medical, dental, and vision insurance, a competitive 401(k) retirement plan with company matching, and additional benefits and perks.\n\nThe opportunity to work on ambitious AI products alongside a highly experienced, fast-moving, and international team.\n\nSignificant ownership, direct impact, and opportunities for professional growth as the company scales.\n\nThis is a hybrid role based in the San Francisco Bay Area. Team members are expected to work from our San Francisco office three full days per week, with the remaining days worked remotely and are expected to be available during agreed working hours and to maintain sufficient overlap with the relevant team’s time zone. We value in-person collaboration, active communication, responsiveness, and close partnership across teams.\nHiggsfield AI is an equal opportunity employer. We are committed to building a diverse and inclusive team and do not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.","description_format":"text","description_chars":6278,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Generative Image","Generative Video","Generative Audio & Music"],"lifecycle":[{"event":"open","at":"2026-09-05T08:54:04Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.553,"p_room":0.44,"age_days":66,"expected_fill_days":55,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":300000,"is_top_pay":true},"html_url":"https://alion.io/job/higgsfield-lead-grc-engineer","json_url":"https://alion.io/job/higgsfield-lead-grc-engineer.json","meta":{"generated_at":"2026-11-03T10:19:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14328,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":66037},"rest":"https://alion.io/mcp/rest/get_company?id=66037"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhiggsfield-lead-grc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhiggsfield-lead-grc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhiggsfield-lead-grc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/higgsfield-lead-grc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhiggsfield-lead-grc-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":216646}},{"tool":"search_jobs","arguments":{"company":"higgsfield.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":216646},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}