# GRC Engineering Club > The GRC Engineering Club is the leading community for GRC engineers - professionals who treat governance, risk, and compliance as an engineering discipline, not a checkbox exercise. Founded by AJ Yawn. ## Site - Domain: grcengclub.com - Type: Professional community and educational platform - Topics: GRC engineering, compliance automation, cloud security, cybersecurity careers ## Key Pages - [Home](https://grcengclub.com/): Overview of the GRC Engineering Club, what GRC engineering is, and how to join - [Learn Library (All Guides)](https://grcengclub.com/learn): Every GRC engineering guide organized by cluster: foundations, careers and getting in, certifications, AI and GRC, automation, and auditing the modern stack. - [FAQ](https://grcengclub.com/faq): Common questions about GRC engineering, the club, cloud providers, certifications, and getting started - [What You Get](https://grcengclub.com/what-you-get): Membership benefits - private podcast, AWS compliance labs, mock interviews, resume reviews, live Q&A - [Member Stories](https://grcengclub.com/stories): Real career transformation stories from GRC Engineering Club members - [The Academy](https://grcengclub.com/academy): The GRC Engineering Club certification hub. Compare the CGE-P (Practitioner) and the CGE-AUD (Auditor Specialty, available now) and choose the path that fits your role. - [Certified GRC Engineer (CGE-P)](https://grcengclub.com/academy/cge-p): The CGE-P (Certified GRC Engineer – Practitioner) is the first GRC engineer certification built by working GRC engineers. Video training, hands-on labs, an open-book exam, and a real capstone project submitted on GitHub. Free for GRC Engineering Club members; $350 for non-members. - [Certified GRC Engineer, Auditor Specialty (CGE-AUD)](https://grcengclub.com/academy/auditor): The CGE-AUD teaches auditors to evaluate code-defined controls without becoming engineers. Seven domains, ~4 hours of video, a 50-question open-book exam, no portfolio required. Launched July 15, 2026. Free for members; $350 for non-members. - [Chapters](https://grcengclub.com/chapters): Local GRC Engineering Club chapters worldwide. Each chapter gets a Claude license and a $500 annual event budget. Apply to be a founding chapter President. - [Leadership](https://grcengclub.com/leadership): Meet the GRC Engineering Club leadership team - [GRC Engineer Directory](https://grcengclub.com/directory): Find pre-vetted GRC engineers by specialization, certifications, and cloud expertise - [claude-grc-engineering](https://grcengclub.com/projects/claude-grc-engineering): Open-source Claude Code plugin toolkit for GRC engineers — SCF crosswalk across 249 frameworks, evidence collection, gap reports, and OSCAL workflows - [Events](https://grcengclub.com/events): Upcoming live sessions, past articles, labs, and recordings — new content every Tuesday, Thursday, and Saturday - [Anticheckbox Book Tour](https://grcengclub.com/anticheckbox): Book signings and GRC community meetups in Dallas, Houston, and San Diego — Summer 2026 - [The AntiCheckbox Podcast](https://grcengclub.com/podcast): Weekly conversations with GRC engineers, assessors, and founders, hosted by Omar Sangurima. Watch on YouTube, hear it early on Patreon, or apply to come on as a guest. - [Pricing](https://grcengclub.com/pricing): $9.99/month membership, price locked forever. Same access for every member, no tiers or upsells. - [Annual Membership](https://grcengclub.com/annual): $90/year (save $30 vs monthly). Buy seats for an entire team at the same per-seat price. One-time payment, no auto-renew. Members self-report Club hours toward CPE for ISACA, (ISC)2, and IAPP. - [Team Training](https://grcengclub.com/teams): Ongoing GRC team training and professional development for L&D leaders and compliance managers. $90 per seat per year, any quantity, invoices and POs available. Hands-on AWS labs, podcast, live Q&A; members self-report Club hours toward CPE. ## Learn Guides **Foundations** - [GRC Engineering 101](https://grcengclub.com/learn/grc-engineering-101): the complete guide to what GRC engineering is, the skills, the tools, and the career paths. - [GRC vs Traditional GRC](https://grcengclub.com/learn/grc-vs-traditional-grc): how engineered compliance differs from checkbox GRC. - [GRC Analyst vs GRC Engineer](https://grcengclub.com/learn/grc-analyst-vs-grc-engineer): how the two roles differ and how to move from one to the other. **Careers and getting in** - [How to Break Into GRC Engineering](https://grcengclub.com/learn/how-to-break-into-grc-engineering): the step-by-step career transition guide. - [Entry-Level GRC Jobs](https://grcengclub.com/learn/entry-level-grc-jobs): titles to target and how to land your first role. - [GRC for Students](https://grcengclub.com/learn/grc-for-students): build skills and a portfolio before you graduate. - [Get Into GRC With No Experience](https://grcengclub.com/learn/how-to-get-into-grc-with-no-experience): a realistic path from zero background. - [From Cybersecurity to GRC](https://grcengclub.com/learn/cybersecurity-to-grc): how a security background maps to GRC. - [GRC Without a Technical Background](https://grcengclub.com/learn/no-technical-background): breaking in from a non-technical start. - [Join Without Technical Skills](https://grcengclub.com/learn/join-without-technical-skills): who the Club is for if you are early in your technical journey. - [GRC Engineering Salary Guide](https://grcengclub.com/learn/grc-engineering-salary): what GRC engineers earn by level and specialization. **Certifications** - [GRC Engineering Certifications](https://grcengclub.com/learn/grc-engineering-certifications): the complete 2026 guide to every GRC certification. - [CGE-P vs CISA](https://grcengclub.com/learn/cge-p-vs-cisa): hands-on engineering cert versus the classic IT audit credential. - [CGE-AUD vs CISA](https://grcengclub.com/learn/cge-aud-vs-cisa): the modern auditor specialty versus the framework-agnostic classic. - [CGE-AUD Reviews](https://grcengclub.com/learn/cge-aud-reviews): what auditors, assessors, and engineers are saying after passing the auditor specialty. **AI and GRC** - [AI in GRC](https://grcengclub.com/learn/ai-in-grc): how compliance teams use AI in 2026. - [Claude Code for GRC](https://grcengclub.com/learn/claude-code-for-grc): using Claude Code for compliance automation. - [AI Compliance Evidence](https://grcengclub.com/learn/ai-compliance-evidence): automate evidence collection and control mapping. - [claude-grc-engineering Toolkit](https://grcengclub.com/learn/claude-grc-engineering-toolkit): the open-source Claude Code GRC toolkit. - [AI for Risk Assessment](https://grcengclub.com/learn/ai-risk-assessment): what works, what fails, and how to keep risk decisions defensible. **Automation and engineering** - [GRC Automation Guide](https://grcengclub.com/learn/grc-automation): how to automate compliance step by step. - [Automate SOC 2 Evidence](https://grcengclub.com/learn/automate-soc-2-evidence): pull control evidence from cloud and code. - [Automate SOC 2 Compliance](https://grcengclub.com/learn/soc-2-compliance-automation): program-level SOC 2 automation and Type II readiness. - [Automate ISO 27001](https://grcengclub.com/learn/iso-27001-automation): where automation helps the ISMS and where judgment is required. - [Compliance as Code](https://grcengclub.com/learn/compliance-as-code): encode controls as testable policy that runs in your pipeline. - [IaC Compliance Scanning](https://grcengclub.com/learn/iac-compliance-scanning): catch misconfigurations in Terraform before they deploy. - [Continuous Compliance Monitoring](https://grcengclub.com/learn/continuous-compliance-monitoring): from point-in-time audits to always-on. **Auditing the modern stack** - [Auditing Infrastructure as Code](https://grcengclub.com/learn/auditing-infrastructure-as-code): how auditors read Terraform and use state and drift as evidence. - [Auditing CI/CD Pipelines](https://grcengclub.com/learn/auditing-cicd-pipelines): segregation of duties, approval gates, and build logs as evidence. - [How to Audit a Cloud-Native Company](https://grcengclub.com/learn/how-to-audit-cloud-native-company): auditing when there are no servers to inspect. - [Screenshots Are No Longer Audit Evidence](https://grcengclub.com/learn/screenshots-audit-evidence): where audit evidence actually lives now: code, state, drift, and pipeline records. ## Key Facts - GRC engineering treats compliance as code, not spreadsheets - GRC engineers earn $70,000 to $330,000+ depending on experience, location, and specialization - The highest verified GRC engineer salary in the club is $330,000 - The club has 470+ Patreon members and 70,000+ LinkedIn reach - Local chapters are launching worldwide; each chapter gets a Claude license and a $500 annual event budget (grcengclub.com/chapters) - Core skills: Python/Go, Terraform, AWS/Azure/GCP, compliance frameworks (SOC 2, FedRAMP, CMMC, ISO 27001) - The GRC Engineering Club Academy at grcengclub.com/academy offers multiple certifications: the CGE-P (Certified GRC Engineer – Practitioner, the first GRC engineer certification), the CGE-AUD (Auditor Specialty, available now), and more credentials on the roadmap including guest instructor courses - The claude-grc-engineering open-source toolkit maps to 249 compliance frameworks via the Secure Controls Framework (SCF) crosswalk - Membership is $9.99/month (price locked forever for early members) or $90/year for the annual plan (saves $30, available for individuals and teams at grcengclub.com/annual) - Team training is $90 per seat per year at any quantity; members self-report Club learning hours toward CPE for ISACA, (ISC)2, and IAPP certifications ## Extended Content - See [llms-full.txt](https://grcengclub.com/llms-full.txt) for detailed page content