Post-Sales GRC SME

Posted about 2 months agoViewed

United StatesFull-TimeGRC

Company:Vanta

Location:United States

Languages:English

Seniority level:Senior

Skills:

Artificial IntelligenceCloud ComputingCybersecurityProblem SolvingComplianceSaaSRisk Management

Deep understanding of security, privacy, and AI governance frameworks (SOC 2, ISO 27001, ISO 42001, HITRUST, HIPAA, GDPR, NIST AI RMF, etc.) including experience either auditing, or participating in a cybersecurity audit
Ability to perform control mapping exercises for net-new frameworks
Problem-solving skills in a fast-paced environment
Passion for leveraging AI and automation to advance GRC and risk management maturity
Ability to translate complex compliance requirements into actionable technical guidance for SaaS environments
Familiarity with cloud infrastructure, version control systems, risk management, vulnerability management, and their related security processes
Experience in building productive relationships and driving collaboration with both technical and non-technical teams
Knowledge of the cybersecurity audit process
Security compliance management experience within a SaaS environment preferred, but not required
Sales Engineering or Technical Support experience preferred, but not required
Industry certifications (e.g. CISA, CISSP, CISM, CIPP/E) and/or formal education preferred, but not required

Partner with Sales and Customer Success teams to represent Vanta's Trust Management Platform to prospects and customers
Facilitate onboarding and implementation of Vanta for new customers
Engage with executives and sr. staff at prospect and customer organizations
Become an expert on security features available within Vanta and best practices for implementation
Advise customers on compliance frameworks like SOC 2 and ISO 27001
Collaborate with the EPD (Product) team to improve processes
Identify requirements for additional customer use cases and drive implementation
Provide input and feedback on the development of security and GRC product features
Answer questions for internal and external stakeholders about security and compliance