Senior AI GRC Engineer

About the role

Vanta is a company dedicated to helping businesses earn and prove trust in their security practices. The Senior AI GRC Engineer will play a crucial role in overseeing and leading governance, risk, and compliance initiatives related to Vanta's internal AI adoption and customer-facing AI products. This position requires a strong background in AI governance, compliance frameworks, and experience working with various engineering teams.

Responsibilities

• Drive Vanta’s internal AI governance programs, including ISO 42001, and evaluate new frameworks for adoption
• Lead the Hardening Enterprise AI Team in researching, implementing, and continuously monitoring scalable and compliant AI guardrails that optimize risk mitigation, compliance, and productivity
• Partner closely with GRC Engineering, Product Engineering, Security Engineering, and other Vanta’ns to ensure AI governance, risk management, and compliance are integrated into Vanta’s programs, projects, and software development life cycles (SDLCs)
• Scale and streamline GRC programs by building automated AI and deterministic processes
• Evangelize AI and GRC Engineering best practices through thought leadership on Vanta’s blog, social media, and events

Requirements

• Strong experience using AI agents, tools, and platforms to automate workflows and build tools, especially with Anthropic, OpenAI, LangChain, and Cursor products
• Expertise in modern cloud-native web application development practices and related security best practices, particularly in AWS, containerized workloads, serverless architectures, and frontier AI platforms
• Expertise in AI governance, risk, and compliance frameworks such as ISO 42001, AIUC-1, EU AI Act, NIST AI RMF, UK AI Safety Framework, etc.
• Experience with compliance programs for SOC 2, ISO 27001/17/18, ISO 27701, GDPR, etc.
• Experience applying GRC Engineering principles and values, including control monitoring automation, systems & design thinking, and threat-informed GRC
• Open to using AI to enhance skills and improve efficiency and impact

Qualifications

• Industry-competitive salary and equity
• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
• 16 weeks paid parental leave for all new parents
• Health & wellness stipend, remote workspace, internet, and cellphone stipend
• Commuter benefits for team members who report to the SF and NYC office
• Family planning benefits, matching 401(k) contribution with immediate vesting
• Flexible PTO policy, plus 80 hours of Sick Time
• 11 company-paid holidays
• Virtual team building activities, lunch and learns, and other company-wide events!
• Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

Benefits

• Industry-competitive salary and equity
• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
• 16 weeks paid parental leave for all new parents
• Health & wellness stipend, remote workspace, internet, and cellphone stipend
• Commuter benefits for team members who report to the SF and NYC office
• Family planning benefits, matching 401(k) contribution with immediate vesting
• Flexible PTO policy, plus 80 hours of Sick Time
• 11 company-paid holidays
• Virtual team building activities, lunch and learns, and other company-wide events!
• Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

Schedule

Full-time, remote position

Pay

Industry-competitive salary and equity