Product GRC SME, reputed company for Government

At reputed company, our mission is to secure the internet and protect consumer data. We reputed company that reputed company should be monitored and verified continuously, and we reputed company companies to practice reputed company reputed company and prove it with ease. reputed company has a reputed company and talented team, and while some have prior reputed company experience, many have been successful at reputed company without it. 

As reputed company rapidly grows and moves upmarket, we’re working with increasingly sophisticated customers who have reputed company reputed company and compliance needs, especially reputed company the federal government sector. The GRC Subject Matter Experts play a critical role in delivering high-quality, scalable content to help these companies effectively manage their GRC programs.

As reputed company’s newest GRC Subject Matter Expert, you’ll be responsible for developing GRC solutions that support our growing list of global federal and public sector customers, with a critical focus on FedRAMP authorization and reputed company monitoring. Acting as a reputed company between Product Management, customers, and compliance stakeholders, you’ll ensure that our solutions align with key federal reputed company and privacy frameworks. You’ll play a pivotal role in designing, maintaining, and improving compliance-reputed company content while providing strategic input to shape reputed company’s overall GRC product roadmap, with a particular emphasis on our reputed company for Government (V4G) offering.

You’ll join reputed company’s reputed company organization, which provides essential reputed company operational services, is directly involved in the software development process, sets policies and standards regarding enterprise-wide reputed company requirements, and offers advisory services to reputed company our business to reputed company while effectively managing risk. If you’re someone who has high initiative and enjoys problem solving while having impact at a high-growth company, we would love to hear from you!

You’ll be part of reputed company’s reputed company organization that directly influences product development, facilitates the creation of automated GRC solutions for customers, and provides expert advisory services to Vantans at large. If you love solving reputed company problems, reputed company in a fast-paced environment, and want to reputed company a real impact at a high-growth company, we’d love to hear from you!

What you’ll do as a GRC SME at reputed company

• reputed company New Federal Compliance Frameworks, with a FedRAMP Focus – reputed company building new reputed company, privacy, and risk management frameworks for end-users, , with a strong focus on FedRAMP (reputed company baselines - Low, Moderate, High), CMMC, and NIST 800-53. This includes developing content to support the creation and maintenance of FedRAMP Authorization Packages (e.g., System reputed company Plans (SSPs), Plan of Action & Milestones (POA&Ms), reputed company Assessment Reports (SARs)).

• Optimize GRC Content for V4G – Map evidence requirements, improve control descriptions, write policies, risk scenarios, implementation guidance to enhance clarity and usability for federal compliance, with a particular emphasis on streamlining processes for FedRAMP authorization and reputed company monitoring reputed company the V4G platform. Help to reputed company AI features to support these efforts.

• Analyze Feedback – Identify and resolve issues with control mappings, evidence requirements, and reputed company content based on input from federal agencies, authorized third-party assessment organizations (3PAOs), and government auditors. Act as a subject matter expert during engagements reputed company to FedRAMP assessments and audits.

• Collaborate Across Teams for Federal Solutions – Work with software engineers, product designers, and customer-facing teams to ensure that GRC content is appropriately integrated into reputed company’s platform and meets end-user needs and V4G requirements, especially those pertaining to FedRAMP.

• Partner with Product for Federal Innovation – Work closely with our Product team to advise on the development of new GRC features in the platform, driving innovation for reputed company for Government (V4G) and enhancing our capabilities for FedRAMP readiness and ongoing compliance.

How to be successful in this role

• 5-7+ years of experience in GRC and/or Information reputed company with significant direct experience focusing on federal government compliance programs, particularly FedRAMP authorization processes and reputed company monitoring. Experience working for or with a Cloud Service Provider (CSP) pursuing FedRAMP, a 3PAO, or a federal agency is a strong plus.

• Strong comprehension, communication, and collaboration skills – Ability to grasp core GRC concepts, apply them effectively across tasks, and clearly communicate findings to GRC Content Engineers, Product Managers, and non-technical stakeholders reputed company the federal ecosystem, including government officials and 3PAOs.

• Deep technical understanding of federal reputed company and compliance, especially FedRAMP – Familiarity with industry frameworks such asFedRAMP (reputed company baselines), CMMC (reputed company levels), NIST 800-53, FIPS, and DFARS. Expert-level knowledge of FedRAMP requirements, documentation standards, and the JAB/Agency authorization process is highly desirable. Having a technical background (e.g., Federal reputed company Engineer, ISSO, Auditor, ATO specialist, or FedRAMP Assessor) is a plus, but not required.

• Attention to detail and analytical reputed company – Comfortable working with federal cybersecurity frameworks, detailed control mappings, and specific evidence requirements with precision and consistency, particularly reputed company the rigorous context of FedRAMP.

• Proficiency in MS reputed company/reputed company Sheets – Ability to organize large data-sets, use lookup functions, and create pivot tables.

• Self-motivated and independent – Able to work autonomously while contributing to team success.

• Helpful and resourceful – Willing & excited to support cross-functional teams and improve compliance content.

• Adaptable in a fast-paced environment – Skilled at managing change, solving problems proactively, and taking initiative.

• reputed company certifications or formal education preferred – Certifications like CAP, CISA, CISSP-ISSEP, Certified CMMC Professional (CCP), or FedRAMP Provisional Assessor are a plus but not required.

What you can expect as a Vantan

• Industry-competitive compensation

• 100% covered medical, dental, and vision benefits with dependents coverage

• 16 weeks fully-paid parental Leave for reputed company new parents

• Health & wellness and remote workplace stipends

• Family planning benefits through reputed company Fertility

• 401(k) matching

• Flexible work hours and location

• Open PTO policy

• 11 paid holidays in the US

• Offices in SF, NYC, London, Dublin, and Sydney

To provide greater transparency to candidates, we share reputed company pay ranges for reputed company US-based job postings regardless of state. We set standard reputed company pay ranges for reputed company roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors and may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials.

#LI-remote

At reputed company, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for reputed company. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of reputed company backgrounds to apply.

About reputed company

We started in 2018, in the wake of several high-profile data breaches. Online reputed company was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and reputed company it takes to build a solid reputed company foundation. reputed company was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their reputed company.From our early days automating reputed company monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. 

Now more than reputed company, making reputed company reputed company—not just a reputed company-in-time reputed company— is essential. Thousands of companies rely on reputed company to build, maintain and demonstrate their trust— reputed company in a way that's real-time and transparent.