---
title: 'Subject Matter Expert, GTM GRC - Revenue at Vanta'
canonical: 'https://feeny.ai/job/subject-matter-expert-gtm-grc-revenue-vanta-united-states-wz54ctm8p2bm'
type: 'job'
last_seen: '2026-09-09'
---

# Subject Matter Expert, GTM GRC - Revenue at Vanta

- **Company:** [Vanta](https://feeny.ai/companies/vanta)
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-04
- **Last confirmed live:** 2026-09-09
- **Apply:** https://jobs.ashbyhq.com/vanta/2f2ad814-2437-46bc-8829-9413f1840db0

## Job description

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.

This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model: paired with Strategic and Enterprise Account Executives, embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will be the practitioner in the room that a buyer's CISO or GRC lead trusts — and the internal expert our AEs, SEs, and marketing team build around.

What you’ll do as a Subject Matter Expert at Vanta:

- Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation.
- Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing.
- Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own.
- Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content.
- Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product and PM partners; carry deal context cleanly into post-sales handoffs.
- Travel roughly once per quarter (a few days to a week) for customer onsites, POC workshops, team offsites, and events.

Domain coverage. We hire T-shaped practitioners: deep in two to three of the following pillars, conversant and demo-capable across all nine — Governance · Data Governance · Compliance · Risk Management (IT, Security, and Enterprise) · Third-Party Risk Management · Continuous Monitoring · Privacy · Trust · AI Security & Governance.

## What we're looking for

- 5+ years of hands-on GRC experience, with buyer-side depth: you've built, run, or transformed a multi-framework compliance program (SOC 2, ISO 27001/27017/27018/27701, HIPAA/HITRUST, PCI DSS 4.0, GDPR and the US privacy patchwork, NIST CSF 2.0), or advised many organizations doing so.
- Working fluency in at least one emerging area — AI governance (ISO 42001, NIST AI RMF), GRC engineering / continuous monitoring, or enterprise risk — and genuine curiosity about the rest.
- Evidence of customer-facing range: you're credible with a skeptical CISO, a first-time founder, and a procurement team in the same week, and you enjoy the thrill of winning deals.
- Production-quality writing: answers, scoping docs, and playbooks that can go to a customer on first draft.
- Demonstrated AI fluency: you use LLM tooling in your compliance work today, can judge AI output against authoritative sources, and want to build with it.
- Teaching ability: you've trained, presented, published, or enabled others, and you're comfortable building and delivering a session to a large GTM audience.
- Sales-process literacy (MEDDPICC or similar), audit-process depth from either side of the table, and the judgment to hold scope boundaries gracefully under deal pressure.

Certifications (CISSP, CISA/CISM, ISO 27001 LA/LI, CIPP/CIPT, AI-governance credentials) are welcome signals, not gates.

What you can expect as a Vanta’n:

- Industry-competitive salary and equity
- Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
- 16 weeks paid Parental Leave for all new parents
- Health & wellness stipend
- Remote workspace, internet, and cellphone stipend
- Commuter benefits for team members who report to the SF and NYC office
- Family planning benefits
- Matching 401(k) contribution with immediate vesting
- Flexible PTO policy, plus 80 hours of Sick Time
- 11 company-paid holidays
- Virtual team building activities, lunch and learns, and other company-wide events!
- Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors and may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials.

#LI-remote

At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply.

## About Vanta

We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous—not just a point-in-time check— is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust— all in a way that's real-time and transparent.

Referral Instructions If you are being referred for the role, please contact that person to apply on your behalf.

## About Vanta

## Company Overview
- **One-liner**: Vanta provides the leading Agentic Trust Platform that automates compliance, risk management, and security proof for businesses.
- **Entity Type**: Private (Series C)
- **Headquarters**: San Francisco, USA (with offices in New York, Dublin, London, and Sydney)
- **Founded**: 2018
- **Founders**: Christina Cacioppo (CEO)

## Core Business
- **Primary Industry**: Governance, Risk, and Compliance (GRC) / Cybersecurity
- **Target Customers**: B2B, ranging from startups to mid-market and enterprise (16,000+ customers)
- **Mission/Purpose**: To protect consumer data and restore trust in internet businesses by enabling companies to improve and prove their security continuously.

## Products & Services
- **Vanta Agentic Trust Platform**: An integrated platform with four core capabilities:
    - **Compliance**: Automates and continuously monitors compliance with 35+ frameworks (SOC 2, ISO 27001, HIPAA, GDPR, FedRAMP, HITRUST, NIST AI RMF, etc.), featuring 1,400+ automated tests and AI-powered policy generation.
    - **Risk**: Provides a unified view of internal and third-party risk, including vendor risk management (TPRM).
    - **Proof**: Enables real-time sharing of security posture through Trust Centers and automated questionnaire responses (reported to automate 93% of questionnaires).
    - **Vanta AI Agent**: A 24/7 GRC engineer that drafts policies, completes questionnaires, flags risks, remediates failed tests, and summarizes findings, saving teams an average of 4+ hours per week.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed.
- **Key Metric**: Total funding of over $300 million.
- **Notable Investors/Partners**: Backed by Sequoia Capital, Craft Ventures, Y Combinator, J.P. Morgan, and Goldman Sachs.
- **Growth Signals**:
    - Trusted by over 16,000 customers.
    - Named a Leader in *The Forrester Wave™: Governance, Risk, and Compliance Platforms, Q2 2026*.
    - Forrester noted that "Vanta’s innovation approach is unparalleled" with "disruptive product launches."
    - Reports of significant customer wins, including saving 2,000 hours annually and eliminating 10 spreadsheets for one customer.

## Competitive Advantages
- **First-mover & Category Leader**: Vanta pioneered automated compliance for fast-growing tech companies and is now the leading platform in the space.
- **AI-Native Platform**: The Vanta AI Agent is a core differentiator, acting as a "24/7 GRC engineer" rather than a simple add-on, making it extremely sticky and efficient.
- **Breadth of Coverage**: Supports 35+ frameworks and integrates with 400+ tools, providing a single source of truth for all trust-related work.
- **Network Effects**: A large customer base and partner ecosystem (e.g., auditor portal) create a strong moat.

## Strategic Focus
- **Continuous Trust**: Moving security from a point-in-time check to a continuous, real-time state.
- **AI-Driven Automation**: Deepening the capabilities of the Vanta AI Agent to handle more complex GRC tasks autonomously.
- **Enterprise Expansion**: Catering to larger, more complex organizations with features like FedRAMP support and advanced TPRM.
- **Global Reach**: Expanding international presence (offices in Dublin, London, Sydney) to serve a global customer base.

## Why Work Here
- **Culture & Values**: Emphasizes a "remote-first" setup in the US and a hybrid model internationally. Core principles include "Put customers first," "Bias for action," "Win as one team," "Lead with resilience," and "Decide with frameworks."
- **Remote/Hybrid Policy**: Remote-first for US team members; hybrid options available at international offices (San Francisco, New York, Sydney, Dublin, London).
- **Benefits**: Comprehensive benefits package includes medical/dental/vision, industry-competitive paid parental leave, generous PTO, and a 401k matching plan.
- **Engineering Culture**: The company is building a platform where the AI Agent acts as an "experienced GRC engineer," offering a chance to work on cutting-edge AI problems in a high-growth environment. The CPO previously scaled engineering, product, and design teams at GitHub.

## Sources
1. [Vanta About Us](https://www.vanta.com/company/about)
2. [Vanta Website](https://www.vanta.com/)
3. [Vanta Careers Page](https://www.vanta.com/company/careers)
4. [Vanta - What is Vanta?](https://www.vanta.com/resources/what-is-vanta)
5. [Vanta Jobs on Ashby](https://jobs.ashbyhq.com/vanta/)

## Other roles at Vanta

- [Account Executive - Japan](https://feeny.ai/job/account-executive-japan-vanta-tokyo-yybfp9n03nyt) — Tokyo, Japan
- [Subject Matter Expert, GTM GRC - Revenue](https://feeny.ai/job/subject-matter-expert-gtm-grc-revenue-vanta-united-states-h9172c7er4g2) — United States
- [Recruiting Coordinator](https://feeny.ai/job/recruiting-coordinator-vanta-london-362bd03m1f2w) — London, United Kingdom
- [Sr. Technical Sourcer](https://feeny.ai/job/sr-technical-sourcer-vanta-united-states-dx94n47jge76) — United States
- [Engineering Manager, App Primitives - CAN](https://feeny.ai/job/engineering-manager-app-primitives-can-vanta-canada-9mmyntcb8y84) — Canada
- [Engineering Manager, App Primitives](https://feeny.ai/job/engineering-manager-app-primitives-vanta-united-states-s8y2nv9jk2kg) — United States
- [Senior Data Analyst, Strategic Finance](https://feeny.ai/job/senior-data-analyst-strategic-finance-vanta-united-states-tpyrtntv40qr) — United States
- [Sales Development Representative, Upmarket](https://feeny.ai/job/sales-development-representative-upmarket-vanta-new-york-xmzpf9ms6vx0) — New York, NY
- [Sales Development Representative - Commercial + Enterprise](https://feeny.ai/job/sales-development-representative-commercial-enterprise-vanta-san-francisco-eh1w8thr4f1a) — San Francisco, CA
- [Director, Vanta for Government Partnerships](https://feeny.ai/job/director-vanta-for-government-partnerships-vanta-united-states-46qf5wfxxdt8) — United States