GRC AI Subject Matter Expert, Product

Job not on LinkedIn

November 19

Apply Now

Receive Emails with Similar Jobs

Vanta

WebsiteLinkedInAll Job Openings

Compliance • Security • SaaS

Vanta is a trust management platform that streamlines compliance workflows and enhances security programs for businesses. By leveraging automation, Vanta helps companies achieve and maintain compliance with frameworks like SOC 2, ISO 27001, and GDPR. It offers solutions for companies of all sizes, from startups to enterprises, ensuring security and compliance at scale. With integrations with over 375 tools, Vanta leverages AI to simplify tasks such as questionnaire automation and vendor risk management. Vanta empowers service providers and auditors to deliver efficient and satisfactory experiences, helping businesses build trust with their clients and partners.

201 - 500 employees

Founded 2018

📋 Compliance

🔐 Security

☁️ SaaS

💰 $40M Series B on 2022-10

📋 Description

• Design and test prompts: Work with engineers and PMs to shape AI behavior, define edge cases, and review outputs for accuracy and usefulness. • Own the ground truth: Build and maintain the “truth layer” — datasets and rating guides that represent correct, real-world GRC answers. • Evaluate and improve quality: Run side-by-side reviews, define launch-readiness criteria, and measure ongoing quality and drift after release. • Ensure responsible AI use: Help design AI systems that respect privacy, minimize hallucinations, and produce explainable, auditable results. • Document and teach: Write clear guides, checklists, and examples others can reuse; host short training sessions to raise the bar for AI quality across teams. • Collaborate widely: Partner with Product, Eng, and GTM teams to connect AI improvements directly to customer trust and business impact.

🎯 Requirements

• 5-7+ years of GRC or InfoSec experience across frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, or NIST. • 1-3 years applying that expertise to AI-assisted workflows - building evaluation sets, reviewing AI outputs, or helping ship AI features. • Strong understanding of evidence, controls, and compliance workflows (TPRM, risk, policy, customer trust). • Skilled at writing clear instructions and evaluation guides others can follow consistently. • Comfortable working with structured data (Sheets, logs, exports) and translating GRC artifacts into usable AI context. • Curious, methodical, and motivated to build systems that make AI both smarter *and* safer. • Certifications like CISA, CISSP, CCSK, or CIPM/CIPT are a plus.

🏖️ Benefits

• Industry-competitive compensation • 100% covered medical, dental, and vision benefits with dependents coverage • 16 weeks fully-paid parental Leave for all new parents • Health & wellness and remote workplace stipends • Family planning benefits through Carrot Fertility • 401(k) matching • Flexible work hours and location • Open PTO policy • 11 paid holidays in the US