GRC Engineer - Automation & Compliance Leader

Cape Cod Community College; Washington (District of Columbia); Hybrid; USD 155,000 - 185,000; Full time

Job summary

Cape Cape is seeking a GRC Engineer to strengthen governance, risk, and compliance across our cloud-native stack and vendor ecosystem. You will translate regulatory requirements into automated controls and policies, collaborating with engineering and security leadership to scale our program.

You will own audit prep, evidence collection, and remediation tracking, while expanding our automated controls and reporting capabilities to support customers and partners.

Qualifications

• 3+ years in GRC engineering, security engineering, or compliance with hands-on technical work.
• Expertise across SOC 2, CMMC, FedRAMP, NIST CSF, GDPR and translating regulatory requirements into technical controls.
• Proven track record designing auditable compliance programs that adapt to changing regulatory landscapes.
• Strong prioritization and project management skills, especially for audits with deadlines.
• Ability to translate risk into business terms for diverse audiences and influence engineering leaders.
• BA/BS in related field; security or audit certifications (CISSP, CISA, CRISC) a plus.
• Bonus: scripting in Python, Go, or TypeScript to automate evidence collection and reporting.

Responsibilities

• Design, build, and maintain automated systems for continuous controls monitoring across cloud infrastructure (AWS/GCP/Azure), CI/CD, and SaaS stack.
• Own and mature our compliance programs end-to-end (SOC 2 Type II, CMMC, and future frameworks), including audit prep, evidence collection, and remediation tracking.
• Provide SME in risk assessment, controls design, security policy, vendor/third-party risk, access review automation, and audit management.
• Proactively assess technical and organizational risk, make data-driven recommendations, and implement scalable solutions.
• Roll up your sleeves to execute a full range of GRC duties, from policy writing to automation shipping.
• Collaborate closely with Security and Engineering to implement risk management, policy, and compliance tooling.
• Ensure successful rollout of key GRC programs such as risk registers, access reviews, vendor risk assessments, and audit cycles.
• Lead and contribute to projects as an integral member of the Security team.
• Support customers through security questionnaires, due diligence requests, and build tooling to speed the process.

Skills

GRC engineering

Security engineering

Compliance programs

Audit management

Cross-functional collaboration

Communication

Education

BA/BS in related field

Tools

Python

Go

TypeScript

Job description

Cape Cape is seeking a GRC Engineer to strengthen governance, risk, and compliance across our cloud-native stack and vendor ecosystem. You will translate regulatory requirements into automated controls and policies, collaborating with engineering and security leadership to scale our program.

You will own audit prep, evidence collection, and remediation tracking, while expanding our automated controls and reporting capabilities to support customers and partners.