At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.
What you'll do
- Apply Deep GRC & Compliance Expertise
- Serve as the primary compliance subject matter expert for Fortune 500 customer engagements, advising on SOC 2, ISO 27001, HIPAA, PCI DSS, NIST, and other frameworks
- Guide customers through complex, multi-business-unit GRC implementations with strict regulatory and financial boundaries
- Diagnose compliance program gaps and translate complex regulatory requirements into actionable roadmaps for enterprise security teams
- Provide expert guidance on audit preparation, control implementation, and compliance program maturation
- Lead & Develop a High-Performing GRC Advisory Team
- Hire, mentor, and develop Strategic CSMs with the technical depth to advise on enterprise compliance programs
- Build clear operating rhythms and success metrics that enable your team to operate as trusted GRC advisors
- Coach your team to navigate complex audit scenarios, control frameworks, and executive stakeholder conversations
- Drive Strategic Customer Outcomes
- Diagnose challenges across Fortune 500 compliance programs and proactively design solutions rooted in GRC best practices
- Define and evolve Vanta's upmarket GRC advisory motion, including framework-specific methodologies and compliance planning
- Use data to understand portfolio health, forecast compliance risks, and drive prioritization across complex regulatory environments
- Demonstrate Strategic Leadership & Influence
- Operate at multiple altitudes: zoom out to identify systemic compliance program issues, zoom in to solve control-level details
- Partner with Product, Sales, and Solutions teams to influence roadmap priorities based on enterprise regulatory requirements
- Represent the voice of Fortune 500 compliance leaders internally, translating customer needs into business strategy
- Guide your team through complex compliance escalations with expertise, steadiness, and principled decision-making
- Engage Strategically With Executive Customers
- Travel for onsite engagements with CISOs, Chief Compliance Officers, and audit committees (approximately 25–40%)
- Lead Executive Business Reviews focused on compliance program maturity, risk posture, and audit readiness
- Strengthen executive alignment around GRC outcomes and demonstrate Vanta's strategic value to enterprise security programs
What we're looking for
GRC & Compliance Expertise (PRIMARY QUALIFIER)
- 11+ years of deep GRC experience across SOC 2, ISO 27001, HIPAA, PCI DSS, NIST frameworks
- Demonstrable auditing background (Big 4, compliance consulting firms, or in-house audit leadership roles)
- Expert understanding of control frameworks, audit methodologies, evidence collection, and compliance program design
- Experience advising Fortune 500 organizations on complex, multi-framework compliance implementations
- Credible technical depth to engage CISOs, Chief Compliance Officers, and audit committees
- Strategic Customer Advisory & Executive Leadership
- Proven ability to serve as a trusted advisor to C-level executives on compliance strategy and risk management
- Strong executive presence with experience leading high-stakes conversations with senior security and compliance leaders
- Track record of owning strategic problems, building scalable GRC advisory frameworks, and driving outcomes independently
People Management & Team Development
- 4+ years leading customer-facing or consulting teams (Customer Success, Compliance Advisory, or similar) supporting Enterprise accounts
- Demonstrated success hiring, developing, and coaching technical teams to operate as subject matter experts
- Ability to build team culture around compliance excellence, customer obsession, and continuous learning
Leadership Capabilities
- Strategic Ownership: Identifies compliance program challenges and drives solutions forward without waiting for direction
- Data Literacy & Business Acumen: Uses metrics to diagnose GRC program performance, set priorities, and communicat