Lead Product GRC Subject Matter Expert
New
V
VantaCybersecurity GRC
Remote U.S.Full-TimeLead
Salary$230K - $270K
Apply NowOpens the employer's application page
Job Details
- Experience
- 8–10+ years
Requirements
- 8–10+ years in GRC and/or Information Security with hands-on federal compliance work.
- Proven experience building or maintaining FedRAMP programs on the CSP side.
- Fluent understanding of NIST 800-53/FedRAMP relationship, 800-53A/B, PPSM, and STIG/CIS benchmarks.
- Working familiarity with OSCAL or other machine-readable compliance approaches.
- Ability to turn a control into a functional test with defined pass and failure conditions.
- Experience using AI tools for GRC workflows, including pair-programming or lightweight automation.
- Strong analytical skills with experience in spreadsheets and large datasets.
- Excellent communication skills for cross-functional collaboration with engineering, GTM, and 3PAOs.
- Independent, lead-level operator capable of setting direction and quality standards.
- Preferred: CISSP-ISSEP, CISA, CCP/CCA, or CISM certifications.
- Preferred: Experience with DoD impact-level (IL4/IL5), CMMC, CNSSI 1253/ICD 503, or GovCloud architecture.
Responsibilities
- Lead the creation, enhancement, and lifecycle management of controls, evidence requirements, and implementation guidance for FedRAMP, NIST SP 800-53, NIST SP 800-171, CMMC, DFARS, and StateRAMP.
- Decompose complex federal controls into distinct, technically testable obligations for engineering.
- Translate federal controls and infrastructure context into spec-level automated tests, detectors, and failure conditions.
- Shape federal content architecture for OSCAL, machine-readable SSPs, and continuous authorization workflows.
- Maintain bidirectional crosswalks across federal frameworks with canonical control IDs and traceability.
- Partner with Product and Design on feature discovery, PRD creation, and acceptance criteria.
- Design and implement LLM-powered guidance and automation for federal compliance workflows.
- Mentor other SMEs, set content quality standards, and define framework strategy.
View Full Description & ApplyYou'll be redirected to the employer's site
