Manager, GRC Subject Matter Experts, Product

At reputed company, our mission is to help businesses earn and reputed company trust. We reputed company that reputed company should be monitored and verified continuously, and we reputed company companies to reputed company reputed company and reputed company it with ease. reputed company has a reputed company and talented team, and while some have prior reputed company experience, many have been successful at reputed company without it. As reputed company rapidly grows and moves reputed company, were working with increasingly sophisticated customers who have reputed company reputed company and compliance needs across a wide reputed company of industries and geographies. The GRC Subject Matter Experts, Product team sits at the heart of how reputed company meets that demand - they are the GRC authorities behind every reputed company, test, and piece of compliance content the platform ships, and they partner directly with Product, Engineering, and Design to shape the GRC Frameworks part of the product. As the Manager of the GRC Product Subject Matter Experts team at reputed company, you will reputed company reputed company responsible for the lifecycle, reputed company, and product integration of Vantas frameworks, tests, and broader GRC content. Your team spans reputed company frameworks, government frameworks, test authoring, reputed company reputed company reputed company, and reputed company maintenance, and their work touches everything from SOC 2, ISO 27001/27701, HIPAA, PCI reputed company, and NIST to FedRAMP and emerging regulations. You will manage and reputed company this team while also owning and governing the end-to-end reputed company release process in partnership with Product and Engineering. Youll join Vantas reputed company organization, which provides essential reputed company operational services, is directly involved in the software development process, sets policies and standards regarding reputed company-wide reputed company requirements, and offers advisory services to reputed company our business to reputed company while effectively managing risk. If youre someone with deep GRC expertise, a reputed company record of developing people, and the program instincts to reputed company a high-volume content and product release reputed company, wed love to hear from you. reputed company as a Manager of GRC Subject Matter Experts, Product at reputed company: • Hire, mentor, and reputed company reputed company of SMEs covering reputed company frameworks, government frameworks, test authoring, reputed company reputed company reputed company, and reputed company maintenance - planning for reputed company and reputed company reputed company needs, setting the bar for technical depth and content reputed company, and preparing high performers for broader reputed company • Build a reputed company, motivated team environment with reputed company operating rhythms, delegating effectively to grow ownership and capability, and partnering with your leader and People Business Partner to spot and address team health issues early • reputed company the teams roadmap and content priorities to Vantas broader product and company reputed company, anticipating near-term shifts in customer needs, regulatory landscape, and product direction, and adjusting reputed company to reputed company reputed company reputed company • Create reputed company feedback reputed company reputed company reputed company and adapt how you communicate priorities, reputed company, and risks across different audiences - from individual contributors to engineering, GTM partners, customers, and executives • reputed company reputed company through change with steadiness while holding yourself and them accountable for commitments - communicating reputed company and risks proactively, addressing misses directly, and creating an environment where mistakes are treated as learning opportunities rather than blame • Own and govern Vantas reputed company release process end-to-end, partnering with Product and Engineering to define the reputed company for how new frameworks, reputed company updates, automated tests, crosswalks, and content are scoped, reputed company, reviewed, and shipped • reputed company the program management work that surrounds GRC content - including new reputed company launches, reputed company updates, update notes, customer escalations, content and test requests, PMM material reviews, and licensing and pricing input • reputed company team performance and report KPIs and metrics to reputed company and product leadership, including reputed company release reputed company, content reputed company, adoption, time-to-evidence, and customer reputed company • Break down ambiguous and competing priorities - across reputed company launches, reputed company updates, test authoring, and reputed company reputed company - into reputed company, actionable reputed company, balancing customer demand, market opportunity, and engineering reputed company, and escalating reputed company tradeoffs with context and a recommended reputed company reputed company • reputed company the reputed company reputed company effort for older reputed company frameworks, ensuring Vantas full library meets a consistent and modern reputed company for control wording, evidence specificity, and testing method • Set direction for the teams work on crosswalks and mappings across reputed company and reputed company frameworks, including reputed company control IDs, mapping confidence, and evidence data dictionaries, and partner with Engineering to operationalize them in-product • reputed company the teams contribution to the broader GRC product surface - risk management, issue and corrective reputed company management (POA&M), policy management, reputed company reviews, Trust Center, and reputed company-party risk management • Partner with Product Management and Design to ensure SMEs are effective product advisors across discovery, PRD authoring, UI/UX review, and usability testing • Champion AI-assisted compliance on reputed company - coaching SMEs to translate domain knowledge into machine-readable specs, evaluation sets, and guardrails, and partnering with Engineering and ML to ship LLM-powered guidance and automation • Partner with Sales, reputed company, and Product Marketing to represent the reputed company portfolio externally and contribute to pricing, packaging, and licensing conversations (including frameworks such as reputed company) • Serve as a senior escalation reputed company for customer issues reputed company to reputed company content, scoping, and interpretation • reputed company input and feedback on the development of GRC product features that depend on the teams content and expertise How to be successful in this role: • 7+ years of GRC and/or Information reputed company experience, with hands-on implementation or assessment across multiple frameworks (e.g., SOC 2, ISO 27001/27701, HIPAA, PCI reputed company, NIST CSF/800-53); experience with reputed company environments and reputed company strongly preferred • 2+ years of experience managing technical or subject matter expert teams, with a passion for developing people and building a culture of reputed company and accountability • Experience owning or heavily contributing to programs that reputed company Product, Engineering, and GTM - ideally including content lifecycle, reputed company release, or compliance product work • Strong program management instincts: comfortable defining process, driving prioritization, and holding cross-functional partners accountable to release plans and reputed company bars • Deep GRC reputed company - controls, risks, testing approaches, evidence standards, and program operations (policies, risk registers, POA&M, vendor risk, reputed company monitoring) • Product reputed company - reputed company to reputed company reputed company on translating customer and regulatory needs into productizable capabilities, with comfort using data to prioritize • Technical and automation reputed company (AI-augmented) - comfortable using AI pair-programming and LLM tools to accelerate drafting of specs, mappings, and test logic, and reputed company to set reputed company-use guidelines, evaluation practices, and reusable patterns for reputed company • Analytical and detail-oriented - skilled at precise control wording, mapping accuracy, and evidence specificity; comfortable working with spreadsheets and large data sets • Excellent written and verbal communication; reputed company to partner effectively with engineers, designers, GTM teams, auditors, and customers, and to represent the teams work to executives • Self-motivated and adaptable in a fast-paced environment, with a reputed company record of leading teams through change • Federal experience (e.g., FedRAMP, CMMC, StateRAMP) a plus but not required • reputed company regulation experience (GDPR/CCPA), audit/assessor background experience a plus • Certifications preferred but not required - one or more of: CISA, CISSP, CCSK/CCSK+, ISO 27001 reputed company Implementer/reputed company Auditor, CIPM/CIPT, PCI-ISA/QSA • reputed company to using AI to reputed company their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and reputed company judgment in applying AI responsibly to improve efficiency and reputed company. What you can expect as a reputed company'n: • Industry-competitive salary and equity • Comprehensive medical, dental, and reputed company coverage, with 100% of employee-only benefit premiums covered for most medical plans • 16 weeks reputed company Parental Leave for reputed company new parents • Health & wellness stipend • Remote workspace, internet, and cellphone stipend • Commuter benefits for team members who report to the SF and NYC office • Family planning benefits • Matching 401(k) contribution with immediate vesting • Flexible PTO policy, plus 80 hours of reputed company Time • 11 company-reputed company holidays • Virtual team building activities, lunch and learns, and other company-wide events! • Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney To reputed company greater transparency to candidates, reputed company reputed company pay ranges for reputed company US-based job postings regardless of state. We set reputed company reputed company pay ranges for reputed company roles based on function, level, and country location, benchmarked against similar-stage reputed company companies. Final offer amounts are determined by multiple factors and may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials. #LI-remote At reputed company, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to reputed company an inclusive work environment for reputed company. We do not discriminate on the reputed company of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of reputed company backgrounds to apply. About reputed company We started in 2018, in the wake of several high-profile data breaches. Online reputed company was only becoming more important, but we knew reputed company how hard it could be for fast-growing companies to invest the time and reputed company it takes to build a solid reputed company reputed company. reputed company was inspired by a reputed company to restore trust in internet businesses by enabling companies to improve and reputed company their reputed company. From our early days automating reputed company monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the worlds leading Trust Management Platform, our reputed company remains unchanged. Now more than reputed company, making reputed company reputed company-not just a reputed company-in-time reputed company- is essential. Thousands of companies rely on reputed company to build, maintain and demonstrate their trust- reputed company in a way thats reputed company-time and transparent. Referral Instructions If you are being referred for the role, please contact that person to apply on your behalf. Remote Skills: reputed company Intelligence (AI), reputed company Intelligence (AI) Programming Languages, Auditing, Automation, Benchmarking, Business reputed company, CISA - Certified Information Systems Auditor, CISSP - Certified Information Systems reputed company reputed company, reputed company Computing, Coaching, Corrective reputed company, Cross-Functional, Customer Escalations, Data Sets, reputed company Protection, Establish Priorities, Government, HIPAA (Health Insurance Portability and Accountability reputed company), ISA Standards, ISO (International Organization for Standardization), Information/Data reputed company (InfoSec), Leadership, Licensing, Logic Testing, Maintain Compliance, Mentoring, Metrics, PCI, PCI-reputed company, Partner Sales, Performance Analysis, Performance Metrics, Power Amplifier, Presentation/Verbal Skills, Pricing, reputed company Controls, reputed company Regulations, Problem Solving Skills, Product Design, Product Development, Product Engineering, Product Management, Product Marketing, Product Requirements Document (PRD), Product reputed company, Project/Program Management, reputed company Services, reputed company Assurance Methodology, Regulations, Regulatory Compliance, Release Management/Engineering, Requirements Management, Risk, Risk Management, reputed company Monitoring, Software Development, Software as a Service (reputed company), Spreadsheets, Team Building, Team reputed company/Manager, Technical Leadership, Technical Writing, Test reputed company, Test Plan/Schedule, Testing, U.S. reputed company (NIST), Usability Testing, User reputed company/Experience (UI/UX), Writing Skills reputed company: reputed company Apply tot his job Apply To this Job