GRC Subject Matter Expert, Product

At Vanta, our mission is to secure the internet and protect consumer data. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. 

As Vanta rapidly grows and moves upmarket, we’re working with increasingly sophisticated customers who have complex security and compliance needs. The GRC Content Engineering Team plays a critical role in delivering high-quality, scalable content to help these companies effectively manage their GRC programs.

As Vanta’s newest GRC Content Engineer, you’ll be responsible for developing GRC solutions that support our growing list of global customers. Acting as a bridge between Product Management, customers, and compliance stakeholders, you’ll ensure that our solutions align with key security and privacy frameworks. You’ll play a pivotal role in designing, maintaining, and improving compliance-related content while providing strategic input to shape Vanta’s overall GRC product roadmap.

You’ll join Vanta’s Security organization, which provides essential security operational services, is directly involved in the software development process, sets policies and standards regarding enterprise-wide security requirements, and offers advisory services to enable our business to thrive while effectively managing risk. If you’re someone who has high initiative and enjoys problem solving while having impact at a high-growth company, we would love to hear from you!

You’ll be part of Vanta’s Security organization that directly influences product development, facilitates the creation of automated GRC solutions for customers, and provides expert advisory services to Vantans at large. If you love solving complex problems, thrive in a fast-paced environment, and want to make a real impact at a high-growth company, we’d love to hear from you!

What you’ll do as a GRC Content Engineer at Vanta

• Develop New Compliance Frameworks – Assist in building new security, privacy, and risk management frameworks for end-users.

• Optimize GRC Content – Map evidence requirements, improve control descriptions, write policies, risk scenarios, implementation guidance to enhance clarity and usability, and help to develop AI features.

• Analyze Feedback – Identify and resolve issues with control mappings, evidence requirements, and framework content based on end-user and auditor input.

• Collaborate Across Teams – Work with software engineers, product designers, and customer-facing teams to ensure that GRC content is appropriately integrated into Vanta’s platform and meets end-user needs.

• Partner with Product – Work closely with our Product team to advise on the development of new GRC features in the platform.

How to be successful in this role:

• 2-4 years of experience in GRC and/or Information Security – Consulting experience is a plus but not required.

• Strong comprehension, communication, and collaboration skills – Ability to grasp core GRC concepts, apply them effectively across tasks, and clearly communicate findings to GRC Content Engineers, Product Managers, and non-technical stakeholders.

• Technical understanding of security and compliance – Familiarity with industry frameworks such as ISO 27001, SOC 2, HIPAA, and NIST 800-53. Having a technical background (SOC Analyst, Security Engineer, Vuln Management, etc.) is a plus, but not required.

• Attention to detail and analytical mindset – Comfortable working with cybersecurity frameworks, control mappings, and evidence requirements with precision and consistency.

• Proficiency in MS Excel/Google Sheets – Ability to organize large data-sets, use lookup functions, and create pivot tables.

• Self-motivated and independent – Able to work autonomously while contributing to team success.

• Helpful and resourceful – Willing & excited to support cross-functional teams and improve compliance content.

• Adaptable in a fast-paced environment – Skilled at managing change, solving problems proactively, and taking initiative.

• Security certifications or formal education preferred – Certifications like Security+, CISA, or CISSP are a plus but not required.

What you can expect as a Vantan:

• Industry-competitive compensation

• 1