Product GRC SME
VantaSan Francisco, California, United States ⢠New York, New York, United States ⢠London, England, United Kingdom ⢠Indiana, United States ⢠Sydney, New South Wales, Australia
Posted September 16, 2025
Full Time
About the Company
Vanta is an AI-driven trust management platform that automates compliance, streamlines audits, and manages risk for businesses of all sizes. With over 375 integrations and features like automated questionnaire responses and vendor security reviews, Vanta helps companies maintain continuous trust and secure their operations. Trusted by global leaders such as Atlassian and Duolingo, Vanta's AI-powered solutions offer a comprehensive approach to compliance and security management.
Job Description
Vanta is seeking a Product GRC SME to build, maintain, and enhance compliance frameworks for a diverse range of industries. This role bridges communication between Product Management, Engineering, Design, Sales, and Customer Success to ensure solutions align with security, privacy, and risk frameworks. The GRC SME will be a critical part of Vantaâs Security organization, driving value through effective content, automation, and advisory services. This is a fully remote position.
Requirements
- Experience in GRC and/or Information Security
- Hands-on implementation or assessment of multiple frameworks (SOC 2, ISO 27001/27701, HIPAA, PCI DSS, NIST CSF/800-53).
- Bachelorâs degree in Computer Science or advanced degree
- Deep understanding of controls, risks, testing approaches, evidence standards, and program operations.
Benefits
- Industry-competitive compensation
- 100% covered medical, dental, and vision benefits with dependents coverage
- Health & wellness and remote workplace stipends
- Family planning benefits through Carrot Fertility
- 401(k) matching
- Flexible work hours and location
- Open PTO policy
- 11 paid holidays in the US
- Offices in SF, NYC, London, Dublin, and Sydney
