GRC Automation Engineer – Privacy-First Security

Cape; Arizona; On-site; USD 155,000 - 185,000; Full time

Benefits offered by this job

401(k) match

Medical, dental, and vision premiums

12 weeks paid parental leave

Family-forming needs

Gender-affirming care

Unlimited PTO

Job summary

Cape is seeking a GRC Engineer to scale governance, risk, and compliance across our secure network. You will translate regulatory requirements into automated controls, policy, and engineering solutions, collaborating with security and engineering leaders to drive risk decisions and audit outcomes.

As part of the GRC function, you will manage risk assessments, vendor risk, access reviews, and audit cycles, while building tooling to accelerate security questionnaires and due diligence for

Qualifications

• 3+ years in GRC engineering, security engineering, or compliance with hands-on technical work; startup experience preferred.
• Expertise across compliance frameworks (SOC 2, CMMC, FedRAMP, NIST CSF, GDPR) and translating requirements into controls.
• Designing and implementing risk or compliance programs with auditable processes.
• Strong prioritization and project management skills, especially for audits with deadlines.
• Experience partnering with engineering and security leaders to drive risk decisions and audits.
• Clear communication translating technical risk into business terms for varied audiences.
• BA/BS in a related field or equivalent experience; security or audit certifications are a plus.
• Bonus: scripting/programming for automation; familiarity with cloud security tooling.

Responsibilities

• Design, build, and maintain automated systems for continuous controls monitoring across cloud infrastructure and CI/CD.
• Own and mature our compliance programs end-to-end, including audit prep, evidence collection, and remediation tracking.
• Provide SME in risk assessment, controls design, security policy, vendor risk, and audit management.
• Proactively assess risk, make data-driven recommendations, and implement scalable, automated solutions.
• Write policy and ship automation that enforces it; collaborate with Security and Engineering across risk management, policy, and tooling.
• Support customers through security questionnaires and due diligence; build tooling to speed responses.

Skills

GRC engineering

Security engineering

Compliance frameworks

Audit management

Risk assessment

Policy writing

Python/Go/TypeScript

Cloud platforms (AWS/GCP/Azure)

Education

BA/BS or equivalent

Tools

Vanta

Drata

Secureframe

OneTrust

Job description

Cape is seeking a GRC Engineer to scale governance, risk, and compliance across our secure network. You will translate regulatory requirements into automated controls, policy, and engineering solutions, collaborating with security and engineering leaders to drive risk decisions and audit outcomes.

As part of the GRC function, you will manage risk assessments, vendor risk, access reviews, and audit cycles, while building tooling to accelerate security questionnaires and due diligence for