Senior Product Manager, GRC Platform

Responsibilities

• Own the GRC Platform strategy and roadmap, delivering platform primitives and customer-facing features leveraged across Vanta’s GRC product.
• Distill complex problems and opportunities into clearly prioritized product goals, focus for your team, and high-quality execution in collaboration with stakeholders across the company.
• Partner closely with teams across GRC to develop a deep understanding of customer needs, identify opportunities for platform leverage, and translate those insights into intuitive, agentic experiences that solve critical user needs.
• Drive AI-first product redesigns, including defining model evaluation criteria and managing the transition from legacy experiences to agent-led workflows.
• Help define and shape Vanta’s product team culture as we grow.

Requirements

• 5+ years of product management experience, with at least 2 years in a platform or horizontal product role at a B2B SaaS company.
• Demonstrated track record of building shared primitives or capabilities adopted by multiple product and engineering teams.
• Ability to influence and align multiple squads without direct authority, and to drive clarity across complex stakeholder sets.
• Comfort with backend-heavy infrastructure, architectural trade-offs, API standards, and data model decisions.
• Ability to drive AI-first product redesigns and define model evaluation criteria for experiences like imports, search, or structured agent workflows.
• Ability to define and track adoption rates, quality signals, and business impact for platform investments.
• Experience working with enterprise customer segments (10K+ employees) and translating their feedback into platform-level priorities.
• Learner’s mindset, genuine passion for building AI products, and the grit to experiment, iterate, and fail.
• Open to using AI to amplify skills and strengthen work, demonstrating curiosity, willingness to learn, and sound judgment in applying AI responsibly.

Nice-to-Haves

• Experience with GRC workflows or security/compliance domains.