Program Manager, GRC Education

About the Role

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.

As the Program Manager, GRC Education at Vanta, you will lead the strategy, design, and execution of educational programs that empower our customers to master Governance, Risk, and Compliance (GRC). You’ll combine your deep regulatory expertise with a passion for learning and enablement to ensure our customers stay informed, confident, and compliant in an evolving landscape of frameworks, laws, and standards.

In this role, you will own Vanta’s GRC education strategy end-to-end — designing scalable learning programs, maintaining accuracy as regulations shift, and aligning content to both customer needs and Vanta’s business objectives. Your work will directly drive customer success, product adoption, and retention by transforming complex compliance requirements into actionable, engaging education.

Responsibilities:

Lead the GRC Education Program: Develop and execute a comprehensive strategy for customer education across key frameworks (e.g., SOC 2, ISO 27001, HIPAA, GDPR, and others), ensuring programs are current, credible, and effective.
Build and Maintain Educational Infrastructure: Create, organize, and oversee the lifecycle management of all GRC-related learning materials, ensuring updates reflect changes in laws, regulatory requirements, and industry standards.
Design Engaging Learning Experiences: Translate complex compliance topics into clear, accessible educational assets, including on-demand courses, live workshops, and community-based learning.
Collaborate Cross-Functionally: Partner with GRC, Product, Customer Success, and Engineering teams to ensure educational programs support both customer outcomes and product strategy.
Ensure Regulatory Relevance: Monitor global compliance and privacy developments, proactively updating educational content to reflect emerging risks, regulatory shifts, and evolving frameworks.
Foster a Community of Learning: Engage with customers through webinars, community forums, and ongoing learning initiatives to drive confidence and best-practice sharing across the compliance lifecycle.
Measure and Improve Impact: Define success metrics, analyze engagement data, and continuously optimize educational programs to improve learning outcomes and customer satisfaction.
Implement Content Governance and Quality Control: Build scalable review and approval processes to ensure all GRC educational content remains accurate, consistent, and aligned with evolving frameworks and legal standards. Maintain an auditable record of content versioning and updates.