← All roles

Governance, Risk, and Compliance Expert, GTM - V4G

Vanta· CTS
Apply on company site
Remote$171k - $201kFull-timePosted 1mo ago

About the role

GRC subject matter expert focused on government (V4G) opportunities, supporting pre-sales and marketing motions, representing Vanta’s Trust Management Platform to public-sector prospects and customers with deep FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, and NIST 800-171 expertise.

Responsibilities

  • Use expert knowledge of compliance frameworks (FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, NIST 800-171) to advise customers on scoping, policy creation, control requirements, security best practices, and recommend implementations within Vanta’s product.
  • Partner with Sales, Account Management, and Solutions Engineering to own public-sector GRC discussions and represent Vanta’s Trust Management Platform to prospects/customers.
  • Become an expert in V4G product features to optimize public-sector GRC workflows.
  • Engage with executives and senior staff at prospects/customers to establish relationships with security, privacy, and AI teams.
  • Answer questions from internal and external stakeholders on GRC programs and how Vanta supports IT, security, privacy, and enterprise risk workflows.
  • Develop publicly-available marketing and education content focused on public-sector GRC.
  • Represent Vanta in public-facing activities (webinars, panels, conferences, events).
  • Partner with GTM Enablement to design and deliver training on GRC and Vanta product disciplines.
  • Identify customer requirements to improve Vanta’s product across security, privacy, and AI governance; provide feature feedback.
  • Travel roughly twice per quarter for customer onsite, POC workshops, and events.

Qualifications

  • 5+ years of US government compliance experience with direct FedRAMP Ready/Authorized, 3PAO assessment, or both.
  • Working knowledge of FedRAMP (all impact levels and modernization), CMMC 2.0, NIST 800-53 and 800-171, and StateRAMP dynamics.
  • Foundational knowledge of ISO 27001 & SOC 2.
  • Familiarity with SSP and POA&M authorship and ConMon operations.
  • Experience with cloud infrastructure, version control systems, risk management, vulnerability management, and related security processes.
  • Experience with third-party/vendor risk management (TPRM), due diligence, risk scoring, risk assessments, and monitoring.
  • Background in IT, security, and/or enterprise risk management workflows, including risk scoring and treatment planning.
  • Excellent communication and facilitation skills with senior-level sellers and customer-facing stakeholders.
  • Comfortable using AI to enhance GRC work with responsible application of AI.
  • Enterprise sales process literacy (MEDDPICC) preferred.
  • Customer Trust or Sales Engineering experience and certifications (e.g., CISA, CISSP, RP, CCA, CCP) and/or formal education preferred.

Skills

Required:FedRAMPGovRAMP, TX-RAMPNIST 800-53 / 800-171CMMC 2.0SSP / POA&M

Benefits

  • Industry-competitive salary and equity
  • Comprehensive medical, dental, and vision coverage (employee-only premiums covered for most plans)
  • 16 weeks paid Parental Leave
  • Health & wellness stipend
  • Remote workspace, internet, and cellphone stipend
  • Commuter benefits for SF/NY offices
  • Family planning benefits
  • Matching 401(k) with immediate vesting
  • Flexible PTO and 80 hours Sick Time
  • 11 company-paid holidays
  • Virtual team building activities and company-wide events
Last updated Oct 1, 2026. Interested? Apply on the company site.
Vanta logo

About Vanta

Automate compliance, manage risk, and accelerate trust with AI

Vanta automates the complex and time-consuming process of SOC 2, HIPAA, ISO 27001, PCI, and GDPR compliance certification. Automate your security monitoring in weeks instead of months.

compliancesecurityrisk managementtrustcybersecurity
Company profileWebsite

More open roles at Vanta