Why work at Higgsfield AI?

Higgsfield AI is the fastest-scaling generative AI company in history, hitting $1B in annual revenue run rate, 30M+ users worldwide, 6M+ generations per day, and powering 390 of Fortune 500 brands.

We're building at the absolute frontier of AI-powered video creation and next-generation creative tools. Joining Higgsfield means becoming part of a high-impact team shaping the future of AI-native experiences, at a company that isn't just moving fast, but rewriting what fast looks like.

About the role

Higgsfield AI is looking for a hands-on Member of Technical Staff, GRC Engineering to build and scale the technical infrastructure supporting our security, risk, and compliance programs.

As we scale globally, you'll translate compliance requirements into automated technical controls, continuous monitoring systems, and preventative security measures that evolve alongside our business.

Working closely with Security, Engineering, IT, and cross-functional teams, you'll design and implement controls that proactively prevent compliance gaps rather than simply identifying them during audits. This is a technical engineering role focused on building scalable GRC infrastructure, not traditional policy management or audit coordination.

We're looking for someone who combines strong knowledge of compliance frameworks with technical problem-solving skills, sound judgment, and the ability to build systems that support a rapidly growing organization.

What You'll Do

Compliance Engineering & Control Automation

Translate regulatory and compliance requirements into actionable technical controls across corporate and product infrastructure.

Design and implement automated controls for access management, system configurations, security monitoring, and compliance validation.

Build preventative controls and release gates that identify and block noncompliant changes before deployment.

Evaluate which controls should be automated and where human review remains necessary.

GRC Infrastructure & Continuous Monitoring

Build and maintain scalable GRC infrastructure that supports continuous compliance monitoring and evidence collection.

Develop automated workflows to validate control effectiveness and identify compliance gaps in real time.

Design controls that remain effective as employees, systems, vendors, locations, and products evolve.

Integrate compliance checks into existing engineering workflows, infrastructure, and security tooling.

Risk Management & Security Controls

Translate frameworks such as SOC 2, ISO 27001, and other applicable standards into practical engineering requirements.

Partner with Security and Engineering to identify control gaps, prioritize risks, and implement sustainable remediation.

Establish technical standards and preventative guardrails that reduce reliance on manual compliance processes.

Evaluate emerging security and compliance requirements and incorporate them into scalable control designs.

Technical Ownership & Collaboration

Own GRC engineering initiatives from control design through implementation, validation, and ongoing operations.

Build automation through scripts, APIs, integrations, and engineering workflows.

Partner with technical teams to embed compliance requirements into system architecture and development processes.

Help define the long-term GRC infrastructure roadmap to support the company's growth over the next several years.

Requirements

6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.

Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations.

Hands-on experience personally building or automating security and compliance controls.

Production-grade scripting or programming experience, such as Python, including working with APIs and integrations.

Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.

Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.