GRC AI Subject Matter Expert, Product

About Vanta

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.

Role Overview

As we scale AI across the Vanta platform, we’re building intelligent agents that power core GRC workflows — from Third-Party Risk and Customer Trust to Risk & Issue Management and Compliance Frameworks.

As a GRC AI Subject Matter Expert (AI SME), you’ll help make sure our AI features are accurate, auditable, and aligned with real-world compliance standards. You’ll bridge deep GRC knowledge with hands-on AI evaluation, ensuring that every model output we ship is trustworthy, explainable, and customer-ready.

You’ll sit in the Security (ESP) organization and collaborate closely with Product Management, AI Platform Engineering, Design, Security & Privacy, and GTM teams to build AI features customers can truly rely on.

What You’ll Do as a GRC SME at Vanta

• Design and test prompts: Work with engineers and PMs to shape AI behavior, define edge cases, and review outputs for accuracy and usefulness.
• Own the ground truth: Build and maintain the “truth layer” — datasets and rating guides that represent correct, real-world GRC answers.
• Evaluate and improve quality: Run side-by-side reviews, define launch-readiness criteria, and measure ongoing quality and drift after release.
• Ensure responsible AI use: Help design AI systems that respect privacy, minimize hallucinations, and produce explainable, auditable results.
• Document and teach: Write clear guides, checklists, and examples others can reuse; host short training sessions to raise the bar for AI quality across teams.
• Collaborate widely: Partner with Product, Eng, and GTM teams to connect AI improvements directly to customer trust and business impact.

A Day in the Life

Here's what a typical day might look like for a GRC AI Subject Matter Expert at Vanta:

• Morning: Review the performance of AI models on key GRC tasks. Analyze error reports and identify areas for improvement.
• Mid-day: Collaborate with engineers and product managers to design and test new prompts for AI models. Participate in a side-by-side review of AI model outputs.
• Afternoon: Work on building and maintaining the “truth layer” – datasets and rating guides that represent correct, real-world GRC answers. Document best practices and create training materials for other teams.

Why Remote U.S.?

Vanta is a remote-first company, and we believe that talent can be found anywhere. By offering this role as a remote position within the U.S., we can tap into a wider pool of qualified candidates and build a more diverse and inclusive team. This also allows our employees to enjoy a better work-life balance and the flexibility to work from wherever they are most productive.

Career Path

This GRC AI Subject Matter Expert role offers a strong career path within Vanta. You could grow into a Senior SME role, leading larger projects and mentoring other team members. Alternatively, you could transition into a Product Management role, focusing on the strategic direction of Vanta's AI-powered GRC solutions. Another path could be into AI Platform Engineering focusing on improving the AI models themselves.

Salary & Benefits

Vanta offers a competitive salary and benefits package, including:

• Industry-competitive salary and equity
• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
• 16 weeks fully-paid Parental Leave for all new parents
• Health & wellness stipend
• Remote workspace stipend
• Internet stipend
• Cellphone stipend
• Commuter benefits for team members who report to the SF and NYC office
• Family planning benefits

Security Culture

At Vanta, security is not just a product – it's a core value. We are committed to building a strong security culture where everyone understands their role in protecting our customers' data. We provide ongoing security training and awareness programs to ensure that our employees are equipped with the knowledge and skills they need to make informed security decisions.

How to Apply

If you are a passionate and experienced GRC professional with a strong interest in AI, we encourage you to apply! Please submit your resume and a cover letter outlining your qualifications and experience.

FAQ

1. What is Vanta?

   Vanta helps businesses earn and prove trust by continuously monitoring and verifying their security.

2. What does a GRC AI Subject Matter Expert do at Vanta?

   You will ensure our AI features are accurate, auditable, and aligned with real-world compliance standards.

3. What frameworks should I be familiar with?

   SOC 2, ISO 27001, HIPAA, PCI DSS, or NIST.

4. Is this a remote position?

   Yes, this is a remote position within the United States.

5. What are the key skills for this role?

   GRC expertise, AI experience, strong understanding of compliance workflows, and excellent communication skills.

6. What is the career path for this role?

   You could grow into a Senior SME role, Product Management, or AI Platform Engineering.

7. What benefits does Vanta offer?

   Competitive salary, equity, comprehensive medical, dental, and vision coverage, paid parental leave, and more.

8. What is Vanta's security culture like?

   Security is a core value at Vanta, and we are committed to building a strong security culture.

9. What is the interview process like?

   The interview process typically involves several rounds of interviews with the hiring manager, team members, and other stakeholders.

10. What is the company culture like?

    Vanta has a kind and talented team that is passionate about helping businesses earn and prove trust.

How to be successful in this role

• 5-7+ years of GRC or InfoSec experience across frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, or NIST.
• 1-3 years applying that expertise to AI-assisted workflows - building evaluation sets, reviewing AI outputs, or helping ship AI features.
• Strong understanding of evidence, controls, and compliance workflows (TPRM, risk, policy, customer trust).
• Skilled at writing clear instructions and evaluation guides others can follow consistently.
• Comfortable working with structured data (Sheets, logs, exports) and translating GRC artifacts into usable AI context.
• Curious, methodical, and motivated to build systems that make AI both smarter and safer.
• Certifications like CISA, CISSP, CCSK, or CIPM/CIPT are a plus.
• Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

What you can expect as a Vanta'n:

• Industry-competitive salary and equity
• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
• 16 weeks fully-paid Parental Leave for all new parents
• Health & wellness stipend
• Remote workspace, internet, and cellphone stipend
• Commuter benefits for team members who report to the SF and NYC office
• Family planning benefits