---
title: 'GRC Engineer at Cape'
canonical: 'https://feeny.ai/job/grc-engineer-cape-washington-ztdepkpr4b61'
type: 'job'
last_seen: '2026-10-15'
---

# GRC Engineer at Cape

- **Company:** Cape
- **Location:** Washington, DC
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-09
- **Last confirmed live:** 2026-10-15
- **Apply:** https://jobs.ashbyhq.com/cape/f52e2052-3e6d-4af8-901a-b8d0069d31af

## Job description

## About Cape

Cape is America’s privacy-first mobile carrier. Our mission is to be a force for good in global wireless. Cape was founded in 2022 by people who believe privacy is a fundamental right, not a luxury to be traded away. Our journey began when our founder recognized a critical vulnerability in our modern world: everyone relies on the same stagnant cellular infrastructure and legacy systems that track our every movement, monitor and profile our connections, and lose and sell our personal data. Instead of accepting the status quo, we decided to fix it. National security professionals, journalists, parents, and everyone in between can stay connected and have privacy. We didn’t just build a layer on top of old tech; we built America’s most private and secure mobile carrier from the ground up. By building our own network from scratch, we are able to design and build a suite of privacy and security features that no other carrier on the planet can offer. Today, Cape provides our secure network to consumers, businesses, and government agencies alike. We closed our Series C in March 2026, and we are scaling rapidly, with the goal of giving people back control of their most personal information.

The Team At Cape, we are the architects of a privacy-centric movement that is just getting started. We are relentless builders, constantly innovating at the edge of what's possible in telecommunications. We operate on a foundation of high trust and high expectations. Our structure is flat, and collaboration matters more than hierarchy. As a member of our team, you will collaborate with world-class engineers, architects, and visionaries, and work across organizational lines to solve "impossible" problems and deliver mission-critical results for our users every single day.

The Role: We are looking for a GRC Engineer to help grow the governance, risk, and compliance function that keeps Cape secure, trustworthy, and audit-ready as we scale. You will sit at the intersection of security, engineering, and compliance — translating regulatory and contractual requirements into automated controls, clear policies, and pragmatic engineering solutions. You are equally comfortable writing a policy as you are writing a script to enforce it. As a steward of Cape culture, you will partner with engineering and security leaders to identify and remediate risk, run our compliance programs (SOC 2, CMMC, and beyond), and support customers through security due diligence. You put people and data first and always use evidence to drive decisions. You'll join an existing GRC function and are passionate about building on its foundation, sharpening our automation, and helping it scale with the business. This role reports to our Head of Security.

What You'll Work On:

- Design, build, and maintain automated systems for continuous controls monitoring across our cloud infrastructure (AWS/GCP/Azure), CI/CD, and SaaS stack.
- Own and mature our compliance programs end-to-end (SOC 2 Type II, CMMC, and future frameworks as they arise), including audit prep, evidence collection, and remediation tracking.
- Provide subject matter expertise in: risk assessment, controls design, security policy, vendor/third-party risk, access review automation, and audit management.
- Proactively assess technical and organizational risk, make data-driven recommendations, and implement scalable solutions rather than one-off manual fixes.
- Roll up your sleeves to execute a full range of GRC duties — from writing policy to shipping the automation that enforces it.
- Collaborate closely with Security and Engineering to implement solutions across risk management, policy, and compliance tooling.
- Ensure successful rollout of key GRC programs such as risk registers, access reviews, vendor risk assessments, and audit cycles.
- Lead and contribute to projects as an integral member of the Security team.
- Support customers and prospects through security questionnaires, due diligence requests, and trust-building conversations, and build tooling to make that process faster.

Experience:

- 3+ years in GRC engineering, security engineering, or compliance with hands-on technical work; startup experience preferred.
- Demonstrable expertise across compliance frameworks (SOC 2, CMMC, FedRAMP, NIST CSF, GDPR), including how regulatory and contractual requirements translate into technical controls and day-to-day engineering decisions.
- Successful track record of designing and implementing risk or compliance programs, with processes that are clear and auditable but adapt as the business and regulatory landscape change.
- Strong prioritization and project management skills, especially when running audits against real deadlines.
- Experience partnering with and influencing engineering and security leaders to drive risk decisions and audit outcomes; you build trust easily with both engineers and auditors.
- A clear communication style, and the ability to translate technical risk into business terms for different audiences.
- Ability to see all sides of a risk tradeoff, remain objective, and drive issues to resolution — including through ambiguity, with a willingness to roll up your sleeves.
- BA / BS in a related field or equivalent practical experience; relevant security or audit certifications (CISSP, CISA, CRISC, or similar) a plus.
- (Bonus) Proficiency in at least one scripting or programming language (Python, Go, TypeScript) to automate evidence collection, monitoring, and reporting.
- (Bonus) Experience standing up a GRC program or compliance automation tooling (Vanta, Drata, Secureframe, OneTrust) from scratch, and working knowledge of cloud platforms (AWS, GCP, Azure) and their native security and logging tooling.

## Compensation

We offer competitive compensation that is geo-adjusted based on your location, along with meaningful equity so you share in the value you help create. Salary range for this role in New York, NY or Arlington, VA is $155,000 - $185,000 depending on experience and interview performance and location. Our benefits include:

- 401(k) match
- 100% coverage of medical, dental, and vision premiums for you and your dependents
- 12 weeks paid parental leave (for all parents, no waiting period)
- Stipends for
- Family-forming needs
- Gender-affirming care
- Unlimited PTO

Our Culture & Values

- We hire excellent people, give them outsized responsibility, and trust them to execute. Every person at Cape has a proven track record of tackling hard problems and winning.
- We believe that personal privacy and national security are not at odds, and that they can be reconciled through strong technology.
- We believe companies exist to build awesome things and take care of the people who build them, so we offer top-tier healthcare, 401(k) matching, and a generous vacation policy that our team actually uses to recharge.
- We believe that a stronger company and a better product are built by people from all walks of life. We hire without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital status, disability, or Veteran status. If you are great at what you do, you belong here.

How to apply Click the link below to apply. We reserve the right to make use of any unsolicited resumes received from outside recruiting agencies and / or individual recruiters without being responsible for payment of any fees asserted from the use of unsolicited resumes. We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin, and without regard to disability or status as a protected veteran, or any other status protected by law.

## About Cape

## Company Overview
- **One-liner**: Cape is a privacy-first mobile network operator that provides secure, private cellular service with minimal data collection and advanced security features for individuals and organizations.
- **Entity Type**: Private (Series C)
- **Headquarters**: Arlington, Virginia, USA
- **Founded**: 2022
- **Founders**: John Doyle

## Core Business
- **Primary industry/industries**: Telecommunications, Mobile Network Operator (MVNO), Privacy & Security
- **Target customers**: B2C (privacy-conscious consumers), B2B (enterprises), B2G (federal government, military, national security professionals)
- **Mission or purpose statement**: "Connectivity shouldn't cost you your privacy and security. We're redesigning telecommunications from the ground up for everyone from national security professionals to everyday people ready to take back control of their mobile identity." [cape.co](https://www.cape.co/about)

## Products & Services
- **Cape Mobile Service**: A premium MVNO (Mobile Virtual Network Operator) offering private and secure cell phone service with features including:
  - Minimal data collection (only what's needed to provide service, deleted as soon as possible)
  - SIM swap protection
  - Signaling protection
  - Secure global roaming
  - Network Lock
  - Identifier Rotation
  - Disappearing Call Logs
  - Encrypted voicemail
  - Private payments
  - Unlimited Talk and Text
- **Cape Obscura**: Selected as one of TIME's Best Inventions of 2025 [cape.co](https://www.cape.co/about)
- **Partnership Offerings**: Cape partners with Proton to provide Cape subscribers with Proton Unlimited or Proton VPN Plus [cape.co](https://www.cape.co/about)

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed
- **Total Funding**: $181.6M across 6 rounds [linkedin.com](https://www.linkedin.com/company/capecellular)
  - Series C (March 2026): $100M co-led by Bain Capital Ventures and IVP
  - Series B (April 2024): $40M led by Andreessen Horowitz
  - Series A (June 2023): $21.4M
  - Debt Financing (March 2025): $15M from Silicon Valley Bank
- **Key Metric**: Total funding of $181.6M
- **Notable Investors/Partners**:
  - **Investors**: Bain Capital Ventures, IVP, Andreessen Horowitz, Silicon Valley Bank
  - **Partners**: Proton (digital privacy leader), Electronic Frontier Foundation (EFF), GrapheneOS project [cape.co](https://www.cape.co/about)
- **Growth Signals**:
  - Named among Fast Company's 2024 Most Innovative Companies [cape.co](https://www.cape.co/about)
  - Cape Obscura selected as one of TIME's Best Inventions of 2025
  - Recognized in the 2025 Military and Aerospace Electronics Innovators Awards Program
  - Officially emerged from beta into general availability (October 2025) [cape.co](https://www.cape.co/about)
  - Active job postings up 93.8% year-over-year [linkedin.com](https://www.linkedin.com/company/capecellular)

## Competitive Advantages
- **Privacy-by-design**: Collects minimal data, deletes it as soon as possible, never sells data — a true differentiator in the telecom industry
- **Security-first architecture**: Features like SIM swap protection, identifier rotation, disappearing call logs, and signaling protection are built-in, not bolt-ons
- **Deep expertise**: Founded by privacy-first innovators with deep expertise in security, telecom, and technology [cape.co](https://www.cape.co/about)
- **Federal & defense credibility**: Has a dedicated Federal Engineering team, Solutions Architects for the Air Force, and a Head of Navy Business — indicating strong traction in government/military sectors
- **Ecosystem partnerships**: Partnerships with EFF (providing free/discounted service to journalists and activists), Proton, and GrapheneOS create a strong community moat

## Strategic Focus
- **Current priorities**: Expanding general availability post-beta, growing federal/defense business, scaling engineering team, building out APAC operations (Head of APAC hired)
- **Direction for growth**: Becoming the default mobile carrier for security-conscious individuals, enterprises, and government agencies; expanding international presence (operates in 6 countries including India, Canada, South Korea, Australia, and UK) [linkedin.com](https://www.linkedin.com/company/capecellular)

## Why Work Here
- **Culture highlights**:
  - Values: "Do excellent work," "Bias to action" (outcomes over process), "Overshare" (transparency), "Respect the opportunity" (building for mission-critical work) [cape.co](https://www.cape.co/careers)
  - "We don't accept 'the way things are done;' we're hackers who challenge the status quo and redefine the best way to do something. We make 10,000 mistakes, but own each one, and insist on learning quickly." [cape.co](https://www.cape.co/careers)
  - Small, autonomous teams with high ownership
- **Remote/hybrid/office policy**: Hybrid — offices in New York, NY; Arlington, VA; and Washington, DC; with some remote roles available [linkedin.com](https://www.linkedin.com/company/capecellular)
- **Notable perks & benefits** [cape.co](https://www.cape.co/careers):
  - 100% of insurance premiums covered for employee and dependents (Medical, Dental, Vision)
  - "Take what you need" PTO policy
  - Fully paid parental leave (12+ weeks for all parents)
  - 401k with 4% match
  - $20,000 family forming stipend (IVF, adoption, surrogacy)
  - $20,000 gender affirming care stipend
  - 12 weeks military leave with "make-whole" differential pay
- **Engineering culture**: 26% of employees are in technical roles; strong talent pipeline from Palantir, Anduril, Amazon Web Services, and Andreessen Horowitz [linkedin.com](https://www.linkedin.com/company/capecellular)
- **Open roles**: 31 active job postings including Senior Security Engineer, Full Stack Software Engineer, Software Engineer (Infrastructure, iOS, Android), Head of Federal Engineering, Solutions Architect (Air Force, East Asia), VP of Engineering [linkedin.com](https://www.linkedin.com/company/capecellular) [cape.co](https://www.cape.co/careers)

## Sources
1. [cape.co - About](https://www.cape.co/about)
2. [cape.co - Careers](https://www.cape.co/careers)
3. [cape.co - Home](https://www.cape.co/?g=int)
4. [linkedin.com - Cape Company Page](https://www.linkedin.com/company/capecellular)
5. [craft.co - Cape Company Profile](https://craft.co/cape-mobile)

## Other roles at Cape

- [Technical Program Manager, Network](https://feeny.ai/job/technical-program-manager-network-cape-arlington-033r9pj2tvwy) — Arlington, VA
- [Operations Analyst, Federal](https://feeny.ai/job/operations-analyst-federal-cape-arlington-zyk94t9nbp61) — Arlington, VA
- [FP&A Manager](https://feeny.ai/job/fp-a-manager-cape-new-york-8cmyxmggejdj) — New York, NY
- [Operations Analyst, Consumer](https://feeny.ai/job/operations-analyst-consumer-cape-new-york-zdvjzh54xgrn) — New York, NY
- [Controller](https://feeny.ai/job/controller-cape-new-york-5et0dhe3earc) — New York, NY
- [Account Executive, Marine Corps](https://feeny.ai/job/account-executive-marine-corps-cape-arlington-jy6ca8f3dkns) — Arlington, VA
- [Administrative Assistant](https://feeny.ai/job/administrative-assistant-cape-new-york-cpe6dzm7sj8n) — New York, NY
- [Content and Social Media Associate](https://feeny.ai/job/content-and-social-media-associate-cape-new-york-pzythgxsmmk6) — New York, NY
- [Lead Distributed Systems Engineer](https://feeny.ai/job/lead-distributed-systems-engineer-cape-new-york-ffnn4axhmvaz) — New York, NY
- [Solutions Architect, Special Operations](https://feeny.ai/job/solutions-architect-special-operations-cape-arlington-52ts83a1jgxf) — Arlington, VA