GRC Engineer: Automate Compliance & Risk (SOC 2/CMMC)

Cape; Washington (District of Columbia); Hybride; USD 155 000 - 185 000; Plein temps

Avantages offerts par ce poste

401(k) match

Medical premiums covered for you and +

Parental leave 12 weeks

Stipends for family-forming needs

Gender-affirming care

Unlimited PTO

Résumé du poste

Cape is seeking a GRC Engineer to grow governance, risk, and compliance as we scale. You will translate regulatory requirements into automated controls, write clear policies, and build pragmatic engineering solutions.

You will partner with engineering and security leaders to drive risk remediations and audit readiness across SOC 2, CMMC, and beyond. You'll work at the intersection of security, compliance, and product, delivering scalable governance tooling, risk assessments, and evidence

Qualifications

• 3+ years in GRC engineering, security engineering, or compliance with hands-on technical work.
• Demonstrable expertise across SOC 2, CMMC, FedRAMP, NIST CSF, GDPR.
• Successful track record designing and implementing risk or compliance programs.
• Strong ability to translate regulatory requirements into technical controls and engineering decisions.
• BA / BS in related field; CISSP, CISA, CRISC or similar certifications a plus.
• Bonus: scripting in Python/Go/TypeScript to automate evidence collection and reporting.
• Bonus: experience building GRC automation tooling (Vanta/Drata/OneTrust) and cloud platform knowledge.

Responsabilités

• Design, build, and maintain automated systems for continuous controls monitoring across cloud infra and CI/CD.
• Own and mature our compliance programs end-to-end, including audit prep and evidence collection.
• Provide SME input on risk assessments, controls design, policy, vendor risk, and audit management.
• Assess risk and implement scalable, data-driven solutions; avoid one-off fixes.
• Write policies and ship automation that enforces them.
• Collaborate with Security and Engineering to implement governance tooling across risk and compliance.
• Lead and contribute to GRC projects and audits; support customers through security questionnaires.
• Help with trust-building conversations and develop tooling to speed due diligence.

Connaissances

GRC engineering

Security engineering

Compliance frameworks

Risk assessment

Policy writing

Audit management

Scripting automation

Cloud security

Formation

BA / BS in related field

Outils

Vanta

Drata

Secureframe

OneTrust

Description du poste

Cape is seeking a GRC Engineer to grow governance, risk, and compliance as we scale. You will translate regulatory requirements into automated controls, write clear policies, and build pragmatic engineering solutions.

You will partner with engineering and security leaders to drive risk remediations and audit readiness across SOC 2, CMMC, and beyond. You'll work at the intersection of security, compliance, and product, delivering scalable governance tooling, risk assessments, and evidence