Senior AI GRC Engineer, Vanta
$227-267k
+ Equity
AI trust management platform
Be an early applicant
AI trust management platform
1001+ employees
Be an early applicant
$227-267k
+ Equity
1001+ employees
Company mission
To help businesses earn and prove trust.
Role
Who you are
- Strong experience inside and outside of work using AI agents, tools, and platforms to automate workflows and build tools, especially Anthropic products, OpenAI products, LangChain products, and/or Cursor
- Experience using code and web APIs to automate workflows and build tools, especially with TypeScript, Go, and/or Python
- Expertise in modern cloud-native web application development practices and related security best practices, especially in the context of AWS, containerized workloads, serverless architectures, and frontier AI platforms
- Expertise in AI governance, risk, and compliance frameworks, such as ISO 42001, AIUC-1, EU AI Act, NIST AI RMF, UK AI Safety Framework, etc
- Experience with compliance programs for SOC 2, ISO 27001/17/18, ISO 27701, GDPR, etc
- Experience putting GRC Engineering principles and values into practice, especially control monitoring automation, systems & design thinking, and threat-informed GRC
- Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact
What the job involves
- As a Senior AI GRC Engineer at Vanta, you’ll own and lead governance, risk, and compliance initiatives related to Vanta’s internal AI adoption and customer-facing AI products
- You’ll apply deep expertise about AI governance and compliance frameworks and partner closely with various engineering teams (Security, Product, Corporate) to build and monitor scalable guardrails that sustainably and responsibly maximize our productivity and velocity
- You’ll incorporate GRC Engineering principles, values, and best practices every step of the way and help us become the leader in GRC Engineering
- Vanta’s GRC Engineering team enables Vanta’ns to make smart risk decisions so we can reliably achieve our objectives, operate with integrity, and bolster customer trust
- We treat our internal GRC program as a product that serves our internal and external customers’ needs
- We are also Customer Zero of Vanta’s platform and work closely with our GRC SME team and Engineering/Product/Design (EPD) organization to help improve our products
- Drive Vanta’s internal AI governance programs (e.g., ISO 42001) while also evaluating new frameworks for Vanta to adopt
- Lead our cross-functional Hardening Enterprise AI Team (GRC Engineering, Corporate Engineering, Product Engineering, Security Engineering) in researching, implementing, and continuously monitoring scalable & compliant AI guardrails that optimally balance risk mitigation, compliance, and productivity
- Partner closely with the rest of GRC Engineering and other Vanta’ns to ensure AI governance, risk management, and compliance are baked into Vanta’s programs, projects, and SDLCs
- Champion sustainable AI usage across Vanta by being an early adopter and expert user of our AI tools and guardrails, regularly sharing best practices and use cases to foster responsible AI adoption across the company
- Scale & streamline our GRC programs by building agentic AI & deterministic automation
- Evangelize AI & GRC Engineering best practices and solutions through thought leadership on Vanta’s blog, social media, and virtual/in-person events
Our take
The security auditing process is usually very time-consuming, taking hours to complete, and it is often difficult for startups to invest time into such a process. Yet, the benefits of security accreditation are enormous, mainly as many such businesses are working globally and need ways to demonstrate security compliance to one another. Vanta works specifically with startups to help them complete and pass security audits such as SOC 2 and ISO 27001.
The company is a compliance portal and security monitoring platform that businesses use to assess their risk levels. Vanta carries out a pre-audit of a company's digital security and highlights areas that need to be worked on before a full analysis of all threats is carried out. Other businesses such as Datadog or PagerDuty offer similar security monitoring services, but Vanta monitors its customers throughout the year, allowing any issues to be identified and addressed early on.
Vanta's latest $150M raise, boosting its valuation to $4.15B, highlights the company's rapid growth and strong market position. With AI-driven automation, expanding government partnerships, and strategic acquisitions on the horizon, Vanta is scaling quickly while solving real customer problems. Backed by a talented leadership team and a growing customer base, the company looks set to continue its upward trajectory and build a lasting, sustainable business.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
Jul 2025
$150m
SERIES D
Jul 2024
$150m
SERIES C
Total funding: $500.2m
Company benefits
- Health & Wellness: Vanta values the health and well-being of our teammates and offers comprehensive medical, dental, and vision coverage for teammates and dependents. Vanta is excited to provide an additional range of benefits that holistically support your physical, emotional, and financial wellbeing
- Work Your Way: Enjoy a remote-first setup if you're in the US, or go hybrid at our international offices
- Paid Parental Leave: Industry competitive paid parental leave for all parents
- Time Away: Industry competitive and generous PTO policy
- 401K Plan: 401k matching contribution plan
Company HQ
Civic Center, San Francisco, CA
Leadership
Christina Cacioppo
(Founder & CEO)Prior to co-founding Vanta in 2017, Christina worked in Product Management for Dropbox. She was also a Professor at the School of Visual Arts and worked on the Investment Team at Union Square Ventures.
Share this job
View 91 more jobs at Vanta