Lead Product GRC Subject Matter Expert

🕒 vor 1 Tag

🇺🇸 Vereinigte Staaten – Remote

💵 $230.000 - $270.000 / Jahr

⏰ Vollzeit

🟠 Senior

✅ Produktmanager

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Vanta

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

Gegründet 2018

📋 Compliance

🔐 Sicherheit

☁️ SaaS

💰 €40.000.000 Series B im 2022-10

Compliance • Security • SaaS

Vanta ist eine Vertrauensverwaltungsplattform, die Compliance-Workflows optimiert und Sicherheitsprogramme für Unternehmen verbessert. Durch die Nutzung von Automatisierung unterstützt Vanta Unternehmen dabei, die Einhaltung von Rahmenwerken wie SOC 2, ISO 27001 und DSGVO zu erreichen und aufrechtzuerhalten. Sie bietet Lösungen für Unternehmen jeder Größe, von Start-ups bis hin zu Großunternehmen, und gewährleistet Sicherheit und Compliance im großen Maßstab. Mit Integrationen zu über 375 Tools nutzt Vanta KI, um Aufgaben wie die Automatisierung von Fragebögen und das Management von Lieferantenrisiken zu vereinfachen. Vanta befähigt Dienstleister und Prüfer, effiziente und zufriedenstellende Erfahrungen zu bieten und hilft Unternehmen, Vertrauen bei ihren Kunden und Partnern aufzubauen.

Beschreibung

• Lead the creation, enhancement, and lifecycle management of federal compliance controls, evidence requirements, and implementation guidance • Author control rationales, acceptance criteria, and customer-facing guidance as out-of-the-box product content • Interpret 800-53A assessment procedures, 800-53B baselines, organization-defined parameters, and FedRAMP constraints • Decompose controls into technical obligations and resolve inherited, shared, and customer-owned responsibilities • Anchor evidence expectations in PPSM, STIG, and CIS hardening standards and scan outputs • Translate controls and infrastructure context into automated tests and continuous-monitoring detectors • Define test logic, data sources, edge cases, and failure conditions • Partner with Engineering to implement and maintain detectors with versioned framework mappings • Shape machine-readable federal content for OSCAL and FedRAMP 20x • Maintain bidirectional crosswalks across federal compliance frameworks • Partner with Product Management and Design on discovery, UI/UX, PRDs, and acceptance criteria • Partner with Engineering and ML on AI-assisted compliance guidance, evaluation sets, and safety guardrails • Analyze customer, agency, 3PAO, and internal feedback to identify content gaps and ship updates • Mentor and calibrate other SMEs, set content quality standards, and establish framework strategy

🎯 Anforderungen

• 8–10+ years in GRC and/or Information Security • Hands-on federal compliance experience, including building or maintaining FedRAMP programs on the CSP side • Experience authoring SSPs and supporting artifacts and running continuous monitoring • Fluency with the NIST 800-53/FedRAMP relationship, 800-53A/B, organization-defined parameters, control inheritance, non-applicability, customer responsibility matrices, PPSM, and STIG/CIS benchmarks • Working familiarity with OSCAL or other machine-readable compliance approaches • Ability to turn controls into functional tests with defined pass/failure conditions, evidence sufficiency criteria, and system-component coverage • Ability to translate requirements into productizable capabilities • Current use of AI in GRC work, including AI pair-programming tools, lightweight automations, APIs, webhooks, LLM-assisted workflows, measured outcomes, and safe-use patterns • Precision with control wording, mapping accuracy, and evidence specificity • Comfort with spreadsheets and large datasets • Excellent written and verbal communication skills • Ability to work effectively with engineers, designers, GTM teams, agencies, 3PAOs, and customers • Ability to operate autonomously at Lead level • Open to using AI responsibly to improve efficiency and impact • DoD impact-level IL4/IL5 or CMMC experience is a strong plus • StateRAMP, CNSSI 1253/ICD 503, GovCloud or IL-environment architecture experience, or prior GRC platform product/content experience are nice-to-have • Certifications such as CISSP-ISSEP, CISA, FedRAMP 3PAO assessor credentials (CCP/CCA), or CISM are preferred, not required

🏖️ Vorteile

• Industry-competitive salary • Equity • Comprehensive medical, dental, and vision coverage • 100% of employee-only benefit premiums covered for most medical plans • 16 weeks paid Parental Leave for all new parents • Health & wellness stipend • Remote workspace, internet, and cellphone stipend • Commuter benefits for team members who report to the SF and NYC office • Family planning benefits • Matching 401(k) contribution with immediate vesting • Flexible PTO policy • 80 hours of Sick Time • 11 company-paid holidays • Virtual team building activities, lunch and learns, and other company-wide events