Senior AI GRC Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee Vanta’s internal AI governance initiatives (e.g., ISO 42001) while assessing new frameworks for Vanta to implement.

• Direct our cross-functional Hardening Enterprise AI Team (GRC Engineering, Corporate Engineering, Product Engineering, Security Engineering) in researching, executing, and perpetually monitoring scalable and compliant AI guardrails that effectively balance risk mitigation, compliance, and productivity.

• Collaborate closely with the rest of GRC Engineering and other Vanta team members to ensure that AI governance, risk management, and compliance are integrated into Vanta’s programs, projects, and software development life cycles (SDLCs).

• Promote sustainable AI usage at Vanta by becoming an early adopter and proficient user of our AI tools and guardrails, regularly sharing best practices and use cases to encourage responsible AI adoption throughout the organization.

• Enhance and streamline our GRC programs by developing agentic AI and deterministic automation.

• Advocate for AI and GRC Engineering best practices and solutions through thought leadership on Vanta’s blog, social media platforms, and virtual/in-person events.

⛳️ Requirements

• Significant experience utilizing AI agents, tools, and platforms to automate workflows and create tools, particularly with Anthropic products, OpenAI products, LangChain products, and/or Cursor.

• Proficient in using code and web APIs to automate workflows and build tools, especially with TypeScript, Go, and/or Python.

• Deep expertise in modern cloud-native web application development methodologies and security best practices, particularly in relation to AWS, containerized workloads, serverless architectures, and cutting-edge AI platforms.

• Specialized knowledge in AI governance, risk, and compliance frameworks, including ISO 42001, AIUC-1, EU AI Act, NIST AI RMF, UK AI Safety Framework, etc.

• Familiarity with compliance programs such as SOC 2, ISO 27001/17/18, ISO 27701, GDPR, etc.

• Practical experience applying GRC Engineering principles and values, particularly in control monitoring automation, systems & design thinking, and threat-informed GRC.

• Willingness to utilize AI to enhance their skills and improve their work—demonstrating curiosity, a desire to learn, and sound judgment in responsibly applying AI to boost efficiency and impact.

🏝️ Benefits

• Industry-competitive salary and equity.

• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans.

• 16 weeks paid Parental Leave for all new parents.

• Health & wellness stipend.

• Remote workspace, internet, and cellphone stipend.

• Commuter benefits for team members who commute to the SF and NYC offices.

• Family planning benefits.

• Matching 401(k) contribution with immediate vesting.

• Flexible PTO policy, plus 80 hours of Sick Time.

• 11 company-paid holidays.

• Virtual team-building activities, lunch and learns, and other company-wide events!