Senior AI GRC Engineer

About the Role

As a Senior AI GRC Engineer at Vanta, you'll lead governance, risk, and compliance initiatives across Vanta's internal AI adoption and customer-facing AI products. You'll partner with Security, Product, and Corporate Engineering teams to build and maintain scalable guardrails that balance responsible AI practices with organizational velocity, while applying GRC Engineering principles to establish Vanta as a leader in this emerging discipline.

Responsibilities

• Drive Vanta's internal AI governance programs, including ISO 42001 implementation, and evaluate emerging frameworks for adoption
• Lead the cross-functional Hardening Enterprise AI Team in researching, implementing, and continuously monitoring compliant AI guardrails that optimize risk mitigation, compliance, and productivity
• Embed AI governance, risk management, and compliance into Vanta's programs, projects, and software development lifecycle
• Champion sustainable AI usage across the organization by actively using AI tools, sharing best practices, and fostering responsible adoption
• Scale and streamline GRC programs through agentic AI and deterministic automation
• Contribute thought leadership on AI and GRC Engineering best practices through blog posts, social media, and speaking engagements

Requirements

• Demonstrated expertise using AI agents and platforms to automate workflows and build tools, including experience with Anthropic, OpenAI, LangChain, and/or Cursor
• Proficiency automating workflows and building tools via code and web APIs, particularly with TypeScript, Go, and/or Python
• Deep knowledge of modern cloud-native web application development and related security practices, especially AWS, containerized workloads, serverless architectures, and frontier AI platforms
• Expertise in AI governance, risk, and compliance frameworks including ISO 42001, AIUC-1, EU AI Act, NIST AI RMF, and UK AI Safety Framework
• Experience with compliance programs for SOC 2, ISO 27001/17/18, ISO 27701, GDPR, and related standards
• Experience applying GRC Engineering principles and values in practice, including control monitoring automation, systems and design thinking, and threat-informed GRC
• Demonstrated ability and willingness to use AI responsibly to amplify skills, strengthen work output, and improve efficiency

Benefits

• Industry-competitive salary and equity
• Comprehensive medical, dental, and vision coverage with 100% employee-only premium coverage for most medical plans
• 16 weeks paid parental leave for all new parents
• Health and wellness stipend
• Remote workspace, internet, and cellphone stipend
• Commuter benefits for team members in SF and NYC offices
• Family planning benefits
• 401(k) matching with immediate vesting
• Flexible PTO policy plus 80 hours annual sick time
• 11 company-paid holidays
• Virtual team building activities, lunch and learns, and company-wide events
• Office locations in SF, NYC, London, Dublin, Tel Aviv, and Sydney