Vanta GTM Governance, Risk, and Compliance Subject Matter Expert at Vanta specializing in public-sector compliance frameworks. Lead customer-facing GRC discussions and support marketing and product feature development for Vanta for Government.
Responsibilities
Use your expert knowledge of compliance frameworks like FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, and NIST 800-171, to advise customers regarding questions about scoping, policy creation, detailed control requirements and security best practices, and recommend implementations within Vanta’s product related to these frameworks.
Partner with Vanta's Sales, Account Management, and Solutions Engineering teams and own public-sector GRC discussions & activities, representing Vanta’s Trust Management Platform to prospects/customers.
Become an expert in V4G product features to translate how they can help optimize prospect/customer public-sector GRC workflows.
Engage with executives and senior staff at prospect and customer organizations to establish relationships with customer security, privacy, and AI teams.
Answer questions from internal and external stakeholders on GRC programs, including program foundation/scaling strategies, framework-specific requirements, third-party risk management, and broader IT, security, privacy, and enterprise risk workflows - and how Vanta's platform supports each.
Develop publicly-available marketing and education content focused on public-sector GRC for prospects, customers, and partners.
Represent Vanta in public-facing activities including speaking on webinars & panels, participating in conferences, networking at Vanta/partner-led events, and other marketing or thought leadership events.
Partner with GTM Enablement teams to design and deliver training for Vanta's Sales and Account Management orgs on GRC and Vanta product disciplines across security, privacy, and AI governance.
Identify customer requirements that expand or improve Vanta’s product across security, privacy, and AI governance, and provide input and feedback for feature development.
Travel roughly twice per quarter (a few days to a week) for customer onsites, POC workshops, team offsites, and other events.
Qualification
Familiarity with cloud infrastructureBackground in broader ITEnterprise sales process literacy (e
Required
5+ years of experience US government compliance, with direct experience taking an organization to FedRAMP Ready or Authorized, assessing as a 3PAO, or both.
Working knowledge of federal frameworks such as FedRAMP (all impact levels and the program's active modernization), CMMC 2.0, NIST 800-53 and 800-171, and StateRAMP/state-program dynamics .
Foundational knowledge of baseline security compliance frameworks such as ISO 27001 & SOC 2.
Strong understanding of of SSP and POA&M authorship-level familiarity as well as ConMon operations
Familiarity with cloud infrastructure, version control systems, risk management, vulnerability management, and their related security processes.
Experience with third-party/vendor risk management (TPRM) processes, including due diligence, risk scoring, risk assessments, and ongoing monitoring processes.
Background in broader IT, security, and/or enterprise risk management workflows, including risk scoring, likelihood/impact analysis, and treatment planning.
Excellent communication and facilitation skills, with the ability to deliver high-impact learning experiences and earn credibility with experienced, senior-level sellers.
Strong written and verbal communication skills, comfortable engaging customer-facing stakeholders, including C-level contacts, security & privacy leaders, and legal teams, as well as more public partner and industry audiences.
Comfortable using AI to amplify and strengthen GRC work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.
Enterprise sales process literacy (e.g., MEDDPICC) preferred, but not required.
Customer Trust or Sales Engineering experience preferred, but not required.
