About the role

Role Overview

Join Vanta as a Senior AI GRC Engineer to lead governance, risk, and compliance (GRC) initiatives for AI adoption and AI products. You’ll partner with engineering teams to build and monitor scalable AI guardrails, drive internal AI governance programs, and help Vanta mature into a leader in GRC Engineering.

Key Missions

Lead GRC initiatives related to Vanta’s internal AI adoption and customer-facing AI products.
Drive internal AI governance programs (e.g., ISO 42001) and evaluate additional governance frameworks.
Collaborate with engineering teams to build and monitor scalable guardrails that enable responsible productivity and velocity.

Responsibilities

Put GRC Engineering principles into practice, including control monitoring automation, systems thinking/design thinking, and threat-informed GRC.
Champion and operationalize sustainable, responsible AI usage across the company.
Lead a cross-functional team and develop/monitor governance mechanisms for AI systems.

Requirements

Experience applying GRC Engineering principles, especially:
- control monitoring automation
- systems & design thinking
- threat-informed GRC
Compliance program experience across standards such as:
- SOC 2
- ISO 27001/27017/27018
- ISO 27701
- GDPR
Ability to use AI responsibly to improve efficiency and impact (curiosity, learning mindset, and sound judgment).
Strong understanding of cloud-native application security best practices, particularly with:
- AWS
- containerized workloads
- serverless architectures
- cloud/frontier AI platform context
Coding and automation experience building tools/workflows with:
- TypeScript, Go, and/or Python
- web APIs to automate workflows
Strong experience with AI agents/tools/platforms, including one or more of:
- Anthropic
- OpenAI
- LangChain
- Cursor
Expertise in AI governance/risk/compliance frameworks such as:
- ISO 42001
- AIUC-1
- EU AI Act
- NIST AI RMF
- UK AI Safety Framework

Nice-to-Haves

Demonstrated ability to operationalize and evolve internal governance programs/framework adoption over time.
Experience building automated governance/monitoring tooling using AI + software engineering practices.

About Vanta

Vanta is a company that helps organizations with governance, risk, and compliance (GRC) workflows, enabling teams to manage and demonstrate compliance at scale. It operates in the compliance technology/enterprise SaaS space and applies automation and engineering practices to risk management and security assurance.

Tags