Remote Jobs Now
Cape

GRC Engineer

Who can apply: Only open to applicants in: District of Columbia, Virginia.
Location as listed by the employer: “Hybrid, DC; Hybrid: Arlington, VA”
Apply on Cape's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

Cape is hiring for a GRC Engineer role (full-time). See the official posting for full details.

Requirements

  • 3+ years in GRC engineering, security engineering, or compliance with hands-on technical work; startup experience preferred.
  • Demonstrable expertise across compliance frameworks (SOC 2, CMMC, FedRAMP, NIST CSF, GDPR), including how regulatory and contractual requirements translate into technical controls and day-to-day engineering decisions.
  • Successful track record of designing and implementing risk or compliance programs, with processes that are clear and auditable but adapt as the business and regulatory landscape change.
  • Strong prioritization and project management skills, especially when running audits against real deadlines.
  • Experience partnering with and influencing engineering and security leaders to drive risk decisions and audit outcomes; you build trust easily with both engineers and auditors.
  • A clear communication style, and the ability to translate technical risk into business terms for different audiences.
  • Ability to see all sides of a risk tradeoff, remain objective, and drive issues to resolution — including through ambiguity, with a willingness to roll up your sleeves.
  • BA / BS in a related field or equivalent practical experience; relevant security or audit certifications (CISSP, CISA, CRISC, or similar) a plus.

Summarized from the employer's posting — check the full posting for every requirement.