Subject Matter Expert, GTM GRC - Revenue at Vanta · LumiJobs

Responsibilities

Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation.
Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing.
Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own.
Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content.
Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product and PM partners; carry deal context cleanly into post-sales handoffs.
Travel roughly once per quarter (a few days to a week) for customer onsites, POC workshops, team offsites, and events.
Domain coverage. We hire T-shaped practitioners: deep in two to three of the following pillars, conversant and demo-capable across all nine — Governance · Data Governance · Compliance · Risk Management (IT, Security, and Enterprise) · Third-Party Risk Management · Continuous Monitoring · Privacy · Trust · AI Security & Governance.
How to be successful in this role:
5+ years of hands-on GRC experience, with buyer-side depth: you've built, run, or transformed a multi-framework compliance program (SOC 2, ISO 27001/27017/27018/27701, HIPAA/HITRUST, PCI DSS 4.0, GDPR and the US privacy patchwork, NIST CSF 2.0), or advised many organizations doing so.
Working fluency in at least one emerging area — AI governance (ISO 42001, NIST AI RMF), GRC engineering / continuous monitoring, or enterprise risk — and genuine curiosity about the rest.
Evidence of customer-facing range: you're credible with a skeptical CISO, a first-time founder, and a procurement team in the same week, and you enjoy the thrill of winning deals.
Production-quality writing: answers, scoping docs, and playbooks that can go to a customer on first draft.

Subject Matter Expert, GTM GRC - Revenue

Responsibilities

Qualification

Required

Benefits

Company

Vanta

More roles at Vanta