vanta - Senior Manager, GRC Subject Matter Experts, Product
Responsibilities
• 7+ years of GRC and/or Information Security experience, with hands-on implementation or assessment across multiple frameworks (e.g., SOC 2, ISO 27001/27701, HIPAA, PCI DSS, NIST CSF/800-53); experience with cloud environments and SaaS strongly preferred • 2+ years of experience managing technical or subject matter expert teams, with a passion for developing people and building a culture of quality and accountability • Experience owning or heavily contributing to programs that span Product, Engineering, and GTM — ideally including content lifecycle, framework release, or compliance product work • Strong program management instincts: comfortable defining process, driving prioritization, and holding cross-functional partners accountable to release plans and quality bars • Deep GRC craft — controls, risks, testing approaches, evidence standards, and program operations (policies, risk registers, POA&M, vendor risk, continuous monitoring) • Product mindset — able to coach the team on translating customer and regulatory needs into productizable capabilities, with comfort using data to prioritize • Technical and automation fluency (AI-augmented) — comfortable using AI pair-programming and LLM tools to accelerate drafting of specs, mappings, and test logic, and able to set safe-use guidelines, evaluation practices, and reusable patterns for the team • Analytical and detail-oriented — skilled at precise control wording, mapping accuracy, and evidence specificity; comfortable working with spreadsheets and large data sets • Excellent written and verbal communication; able to partner effectively with engineers, designers, GTM teams, auditors, and customers, and to represent the team's work to executives • Self-motivated and adaptable in a fast-paced environment, with a track record of leading teams through change • Federal experience (e.g., FedRAMP, CMMC, StateRAMP) a plus but not required • Privacy regulation experience (GDPR/CCPA), audit/assessor background experience a plus • Certifications preferred but not required — one or more of: CISA, CISSP, CCSK/CCSK+, ISO 27001 Lead Implementer/Lead Auditor, CIPM/CIPT, PCI-ISA/QSA • Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact. • What you can expect as a Vanta’n: • Industry-competitive salary and equity • Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans • 16 weeks paid Parental Leave for all new parents • Health & wellness stipend • Remote workspace, internet, and cellphone stipend • Commuter benefits for team members who report to the SF and NYC office
Benefits
• Cash Range $230K – $311K • Offers Equity • This role is also eligible for medical benefits, 401(k) plan, and other company perk programs. • Upload your resume here to autofill key application fields. • Drop your resume here! • Parsing your resume. Autofilling key fields... • Please note: To ensure that candidates select the most relevant jobs for their skills, we have set up limits for applications across roles. Candidates may not apply to more than 2 roles within 60 days. • or drag and drop here • Decline to self-identify • Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race. • Hispanic or Latino • White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa. • White • Black or African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa. • Black or African American • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands. • Native Hawaiian or Other Pacific Islander • Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam. • Asian • American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment. • American Indian or Alaska Native • Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races. • Two or More Races • Hispanic or Latino • White (Not Hispanic or Latino) • Black or African American (Not Hispanic or Latino) • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) • Asian (Not Hispanic or Latino) • American Indian or Alaska Native (Not Hispanic or Latino) • Two or More Races (Not Hispanic or Latino) • I identify as one or more of the classifications of protected veteran listed above • I am not a protected veteran
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT