Original listing text, shown exactly as published by the company.

What you’ll do as a Senior AI GRC Engineer at Vanta

Drive Vanta’s internal AI governance programs (e.g., ISO 42001) while also evaluating new frameworks for Vanta to adopt
Lead our cross-functional Hardening Enterprise AI Team (GRC Engineering, Corporate Engineering, Product Engineering, Security Engineering) in researching, implementing, and continuously monitoring scalable & compliant AI guardrails that optimally balance risk mitigation, compliance, and productivity
Partner closely with the rest of GRC Engineering and other Vanta’ns to ensure AI governance, risk management, and compliance are baked into Vanta’s programs, projects, and SDLCs
Champion sustainable AI usage across Vanta by being an early adopter and expert user of our AI tools and guardrails, regularly sharing best practices and use cases to foster responsible AI adoption across the company
Scale & streamline our GRC programs by building agentic AI & deterministic automation
Evangelize AI & GRC Engineering best practices and solutions through thought leadership on Vanta’s blog, social media, and virtual/in-person events

How to be successful in this role

Strong experience inside and outside of work using AI agents, tools, and platforms to automate workflows and build tools, especially Anthropic products, OpenAI products, LangChain products, and/or Cursor
Experience using code and web APIs to automate workflows and build tools, especially with TypeScript, Go, and/or Python
Expertise in modern cloud-native web application development practices and related security best practices, especially in the context of AWS, containerized workloads, serverless architectures, and frontier AI platforms
Expertise in AI governance, risk, and compliance frameworks, such as ISO 42001, AIUC-1, EU AI Act, NIST AI RMF, UK AI Safety Framework, etc.
Experience with compliance programs for SOC 2, ISO 27001/17/18, ISO 27701, GDPR, etc.
Experience putting GRC Engineering principles and values into practice, especially control monitoring automation, systems & design thinking, and threat-informed GRC
Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

What you can expect as a Vanta’n

Industry-competitive salary and equity
Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
16 weeks paid Parental Leave for all new parents
Health & wellness stipend
Remote workspace, internet, and cellphone stipend
Commuter benefits for team members who report to the SF and NYC office
Family planning benefits
Matching 401(k) contribution with immediate vesting
Flexible PTO policy, plus 80 hours of Sick Time
11 company-paid holidays
Virtual team building activities, lunch and learns, and other company-wide events!
Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors and may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials.

#LI-remote

At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply.

If you are being referred for the role, please contact that person to apply on your behalf

About Vanta

Vanta

YC W18

Other

98 open roles on Sydicom

About Vanta Vanta (YC W18) is the leading automated compliance and trust management platform designed to simplify and centralize compliance and security workflows for organizations of all sizes. Why YC Startups Need Vanta As a YC company, proving your security compliance is crucial for hitting new milestones—from finding product market fit, to selling to bigger customers. We would know, we’ve been there—and we’ve helped over 10,000 customers do just that! Vanta's all-in-one solution, combined with expert service partners, helps you quickly and painlessly achieve and maintain compliance with top frameworks—like SOC 2 and ISO 27001—and build a strong security foundation, so you can close bigger deals and scale faster. Learn more at vanta.com. YC Companies get Exclusive Discounts on Vanta’s packages: Vanta’s packages for startups are designed to make security and compliance easier, faster, and more cost-effective. Whether you’re closing your first deal or gearing up for growth, our all-in-one solution provides the tools necessary to become compliant quickly, demonstrate your security posture, and build a strong security foundation. Why Vanta? Built for startups: Vanta knows startups. We went through YC in 2018 and have since helped thousands of startups, including YC companies Supabase (YC S20), Fern (YC W23), and Newfront (YC W18) achieve and maintain compliance quickly. Startups like Charityvest (YC S20), BreachRX, and Flo Health have gone from zero to SOC 2 Type I or ISO 27001 certification in 10 days or less with Vanta. Future-proof, feature-rich, automated platform: Vanta’s modular platform is built for the needs of today and tomorrow, including: * 35+ frameworks spanning security, privacy, industry, geographic, and custom frameworks * 375+ integrations that automate evidence collection for these frameworks * 1,200+ automated, hourly tests to ensure real, continuous security—not just at audit time, but all the time * Pre-built policy templates, lightweight agent for security checks, background checks, cyber insurance, cookie consent management, auditor portal, user access reviews, security awareness training, risk assessments, vendor security reviews, managing vulnerabilities, and more * Tailored support for early-stage companies: Vanta offers internal, no-cost Customer Success and GRC (compliance) experts, robust technical support, detailed documentation, and a 24/7 chatbot for frequently asked questions. * (Optional) Purchase Vanta with auditors experienced in your framework and the Vanta platform, or choose from a range of MSP/consulting partners for additional services like penetration tests and virtual CISO support—some at no cost. We don’t force vendor lock-in. * Transparent pricing and promises: Vanta strives to do what it says on the tin: we believe in setting and meeting customer expectations. We offer flexible contracts, fair and transparent pricing, and publish our support metrics. We prefer to focus on helping customers succeed and let them explain why they chose us over others—check out our G2 reviews and customer case studies! Proven market leader and well-funded: Vanta was founded in 2018 and has raised $350M with over 700 employees. We’ve guided over 10,000 customers through their first or multiple audit cycles for various frameworks. These customer learnings and our funding help drive a fast pace of product development to delight customers and ensure Vanta will be there for you in the future. Interested in seeing why Upflow (YC W20), Tailor (YC S22), and hundreds of other YC companies trust Vanta to automate compliance so they can focus on scaling? Reach out to our team at yc@vanta.com to get started!

Source: Y Combinator