[Hiring] Subject Matter Expert, GTM GRC - Revenue @Vanta

Role Description

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease.

This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model:

• Paired with Strategic and Enterprise Account Executives.
• Engaged from first discovery through POC, onsite, close, and expansion.
• Be the practitioner that a buyer's CISO or GRC lead trusts.
• Act as the internal expert for AEs, SEs, and marketing teams.

What you’ll do as a Subject Matter Expert, GTM at Vanta:

• Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives.
• Join discovery and qualification calls at the earliest deal stages.
• Scope compliance programs against Vanta's platform.
• Support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation.
• Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing.
• Answer field questions through our SME channels at customer-forwardable quality.
• Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content.
• Own monthly alignment cadences with sales front-line managers.
• Feed structured product feedback to our Product and PM partners.
• Carry deal context cleanly into post-sales handoffs.
• Travel roughly once per quarter for customer onsites, POC workshops, team offsites, and events.

Domain coverage:

• We hire T-shaped practitioners: deep in two to three of the following pillars, conversant and demo-capable across all nine:
• Governance
• Data Governance
• Compliance
• Risk Management (IT, Security, and Enterprise)
• Third-Party Risk Management
• Continuous Monitoring
• Privacy
• Trust
• AI Security & Governance

Qualifications

• 5+ years of hands-on GRC experience, with buyer-side depth.
• Working fluency in at least one emerging area — AI governance, GRC engineering, or enterprise risk.
• Evidence of customer-facing range.
• Production-quality writing skills.
• Demonstrated AI fluency.
• Teaching ability.
• Sales-process literacy (MEDDPICC or similar).
• Open to using AI to amplify skills and strengthen work.
• Certifications (CISSP, CISA/CISM, ISO 27001 LA/LI, CIPP/CIPT, AI-governance credentials) are welcome signals.

Requirements

• Built, run, or transformed a multi-framework compliance program.
• Curiosity about AI governance and related fields.
• Comfortable building and delivering sessions to large GTM audiences.
• Ability to hold scope boundaries gracefully under deal pressure.

Benefits

• Industry-competitive salary and equity.
• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans.
• 16 weeks paid Parental Leave for all new parents.
• Health & wellness stipend.
• Remote workspace, internet, and cellphone stipend.
• Commuter benefits for team members who report to the SF and NYC office.
• Family planning benefits.
• Matching 401(k) contribution with immediate vesting.
• Flexible PTO policy, plus 80 hours of Sick Time.
• 11 company-paid holidays.
• Virtual team building activities, lunch and learns, and other company-wide events!
• Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney.