Subject Matter Expert, GTM GRC - Revenue

Vanta•,

4d•$171,000 - $201,000•Remote

About The Position

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. This role operates as a named member of deal teams under our pod model, paired with Strategic and Enterprise Account Executives. You will be embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will serve as the practitioner in the room that a buyer's CISO or GRC lead trusts, and the internal expert our AEs, SEs, and marketing team build around. This is not a back-office compliance role and it is not a generic sales-engineering role.

Requirements

5+ years of hands-on GRC experience, with buyer-side depth: you've built, run, or transformed a multi-framework compliance program (SOC 2, ISO 27001/27017/27018/27701, HIPAA/HITRUST, PCI DSS 4.0, GDPR and the US privacy patchwork, NIST CSF 2.0), or advised many organizations doing so.
Working fluency in at least one emerging area — AI governance (ISO 42001, NIST AI RMF), GRC engineering / continuous monitoring, or enterprise risk — and genuine curiosity about the rest.
Evidence of customer-facing range: you're credible with a skeptical CISO, a first-time founder, and a procurement team in the same week, and you enjoy the thrill of winning deals.
Production-quality writing: answers, scoping docs, and playbooks that can go to a customer on first draft.
Demonstrated AI fluency: you use LLM tooling in your compliance work today, can judge AI output against authoritative sources, and want to build with it.
Teaching ability: you've trained, presented, published, or enabled others, and you're comfortable building and delivering a session to a large GTM audience.
Sales-process literacy (MEDDPICC or similar), audit-process depth from either side of the table, and the judgment to hold scope boundaries gracefully under deal pressure.
Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

Nice To Haves

Certifications (CISSP, CISA/CISM, ISO 27001 LA/LI, CIPP/CIPT, AI-governance credentials) are welcome signals, not gates.

Responsibilities

Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation.
Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing.
Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Use AI agents daily, act as the quality gate on their output, and ideally build tooling of your own.
Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content.
Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product and PM partners; carry deal context cleanly into post-sales handoffs.
Travel roughly once per quarter (a few days to a week) for customer onsites, POC workshops, team offsites, and events.
Demonstrate deep knowledge in two to three GRC pillars (Governance, Data Governance, Compliance, Risk Management, Third-Party Risk Management, Continuous Monitoring, Privacy, Trust, AI Security & Governance) and be conversant and demo-capable across all nine.

Benefits

Industry-competitive salary and equity
Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
16 weeks paid Parental Leave for all new parents
Health & wellness stipend
Remote workspace, internet, and cellphone stipend
Commuter benefits for team members who report to the SF and NYC office
Family planning benefits
Matching 401(k) contribution with immediate vesting
Flexible PTO policy, plus 80 hours of Sick Time
11 company-paid holidays
Virtual team building activities, lunch and learns, and other company-wide events!