Lead Product GRC Subject Matter Expert
Core
Lead the creation and lifecycle management of federal compliance content (controls, evidence requirements, implementation guidance) for Vanta's V4G platform, translating complex frameworks into technically testable specs for engineering and customers.
Role type
Lead Product GRC Subject Matter Expert (Federal Compliance)
Builds
Automated GRC solutions, product content, and machine-readable compliance frameworks (OSCAL) for federal customers.
Domain
Federal Cybersecurity Compliance (FedRAMP, NIST, CMMC) and Product Engineering
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Federal compliance program administration (CSP side), SSP authoring, continuous monitoring, NIST 800-53/FedRAMP interpretation, control decomposition, test design, cross-framework mapping, product requirement documentation, AI-assisted workflow design, technical writing.
Preferred skills
DoD impact-level (IL4/IL5) experience, CMMC experience, OSCAL familiarity, StateRAMP experience, GovCloud architecture, CISSP-ISSEP/CISA/CISM certifications.
Technologies
AWS GovCloud, Azure Government, GCP, CI/CD pipelines, OSCAL, LLMs/AI tools, Spreadsheets, APIs.
Responsibilities
Build and own federal compliance frameworks (FedRAMP, NIST SP 800-53/171, CMMC, DFARS); Interpret controls at the mechanics level and resolve organization-defined parameters; Author automated tests and continuous monitoring detectors; Lead machine-readable future initiatives (OSCAL, FedRAMP 20x); Design crosswalks and mappings across federal frameworks; Act as a product advisor on discovery, design, and PRDs; Enable AI-assisted compliance workflows; Synthesize feedback loops from customers and agencies; Mentor other SMEs and set content quality standards.
Seniority
Lead, hands-on IC with mentorship responsibilities
