Cape
GRC Engineer
$155K–$185K
Hybrid, DC +1 · Hybrid · Full-time · Posted Oct 9, 2026
- Location
- Hybrid, DC
Hybrid: Arlington, VA - Experience
- 3+ years in GRC engineering, security engineering, or compliance with hands-on technical work.
- Education
- BA / BS in a related field or equivalent practical experience.
About the job
Build and operate Cape’s GRC function by translating compliance and risk requirements into automated controls, policies, and engineering solutions.
What you'll do
- Build automated continuous controls monitoring across cloud infrastructure, CI/CD, and SaaS; own compliance programs, audits, evidence collection, and remediation tracking.
- Assess and manage risk, design controls and policies, and implement programs such as risk registers, access reviews, and vendor assessments.
- Partner with Security and Engineering, and support customer security due diligence with questionnaires, trust conversations, and tooling.
What they ask for
- 3+ years in GRC engineering, security engineering, or compliance with hands-on technical work.
- Demonstrable expertise with compliance frameworks, including translating requirements into technical controls and engineering decisions.
- Track record designing and implementing clear, auditable risk or compliance programs.
- BA / BS in a related field or equivalent practical experience.
Nice to have
- Startup experience; relevant security or audit certifications (CISSP, CISA, CRISC, or similar).
- Scripting or programming proficiency (Python, Go, TypeScript); experience with GRC automation tooling and cloud platforms.
Pay
$155,000 - $185,000 USD base salary
Tools
AWS, GCP, Azure, CI/CD, Python, Go, TypeScript, Vanta
Model-written summary · the original posting is authoritative