Senior Security Governance Risk & Compliance (GRC) Analyst
Alma- Full Time
- Senior (5 to 8 years)
Candidates should have experience working with security and privacy frameworks, including SOC2, ISO 27001, ISO 27701, FedRAMP, HIPAA, GDPR, and CCPA. Demonstrated expertise in SOC 2 or ISO 27001 is required, along with technical knowledge to understand and explain security and GRC concepts.
As a GRC Subject Matter Expert, you will partner with Sales and Customer Success teams to represent Vanta’s Trust Management Platform to prospects and customers, engage with executives and senior staff at customer organizations to establish relationships, become an expert on security features, advise customers on scoping and policy creation, collaborate with teams to provide updates, identify requirements for customer use cases, and provide input on product development. You will also answer prospect questions about Vanta’s security practices and internal stakeholder questions about security and compliance.
Automates SOC 2 compliance for businesses
Vanta simplifies the process of obtaining and maintaining SOC 2 certification, which is essential for organizations that manage sensitive customer data. The company offers a software-as-a-service (SaaS) platform that automates numerous checks to ensure that security controls are effective and compliant with industry standards. This automation helps small to medium-sized enterprises (SMEs) and tech companies monitor risks and vulnerabilities continuously, significantly reducing the time and cost associated with achieving SOC 2 compliance. Vanta's subscription-based model provides clients with a more efficient and cost-effective way to maintain compliance compared to traditional methods. The goal of Vanta is to transform the compliance process, allowing organizations to focus on their core operations while enhancing their security posture.