Source-listed Remote Opportunities

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.

Vanta's Corporate Engineering team is the infrastructure layer that keeps 1,500+ people connected, secure, and moving fast. AI is now central to how that happens, and this role leads the team that owns the backbone underneath it.

Corporate Engineering owns the shared AI platform for Vanta's internal systems: identity and access for AI tools, cost visibility and controls, sanctioned tooling and guardrails, and the enablement that helps people use those tools well. We do not own product AI, which stays with Engineering, and we do not replace the AI work happening inside individual departments. We build the engineering layer that makes all of it safer, cheaper, and better supported.

The company has moved fast. AI assistant use is widespread across every function, MCP infrastructure is live and self-serve company-wide, internal apps ship on a hosted platform, and AI spend has grown to the point where attribution and guardrails genuinely matter. What does not exist yet is a single owner for that platform layer. That is this role.

As Sr. Manager, AI Engineering, you will lead a small, senior team, write the charter for what Corporate Engineering owns versus enables, and build the platform that lets the rest of Vanta adopt AI quickly without accumulating cost, risk, or duplication.

What you’ll do as a Senior Manager, AI Corporate Engineering at Vanta:

• Lead, coach, and grow a senior team spanning platform engineering and technical program management. Set clear direction, hold a high bar, and give the team explicit permission to push back with data.

• Own the AI access layer end to end: identity and authentication for AI tools, connector and integration allowlisting, tiered permissions by function, and guardrails that make adoption safe by default rather than safe by exception.

• Own AI cost engineering. Build attribution down to team and individual, right-size model selection to actual need, make agent and automation spend traceable, and set budget thresholds and alerting in partnership with Finance.

• Own the MCP layer for internal tools end to end, including commissioning, decommissioning, governance, and the downstream impact assessment that has to happen before a migration ships rather than after it breaks.

• Own the paved path for internal applications: a golden-path deployment pattern, sensible defaults including private-by-default, lifecycle and decommissioning policy so unused apps retire themselves, and a build-versus-buy framework that keeps people from rebuilding tools we already own.

• Build the enablement layer that turns adoption into impact: a skills and agent registry that cuts duplication, an evaluation framework for internal AI usage, and technical enablement on sanctioned tools that goes beyond provisioning access.

• Write and hold the charter. Define what Corporate Engineering owns, what it enables, and how work enters the team, then convene the cross-functional forum that keeps departmental AI efforts coordinated rather than duplicated.

• Partner across Engineering, GRC, Security, Data, Finance, and People. Several of the levers this role depends on sit in those organizations, so the job is to coordinate and influence rather than override.

How to be successful in this role:

• Experience standing up an internal AI or developer platform function rather than inheriting a mature one. You have written the charter, defined intake, and built the roadmap from a blank page.

• The ability to hold scope. You can take a commitment that was made without scoping or resourcing, land a bounded first version, and decline the rest without it reading as abdication.

• Fluency in AI cost engineering: usage attribution, model right-sizing, token economics, agent cost traceability, and the difference between a hard limit and a useful guardrail.

• An enablement-first instinct. Your default question is how to make something safe to self-serve. When you do have to decline access, you always explain why and offer an alternative path to the same visibility.

• Hands-on technical depth across LLM platform tooling, agent and MCP architecture, identity and OAuth, CI/CD, and infrastructure as code. Enough to review a design honestly and tell the difference between real risk and reported progress.

• Comfort building for an audience that is no longer only engineers. A growing share of the people shipping internal tools are not developers, and the platform has to work for them without lowering the security bar.

• Data governance fluency in a regulated environment. You know what should never enter a prompt, a repository, or a third-party tool, and you can make that judgment fast without becoming the bottleneck.

• Comfort operating through influence. Product AI, security policy, data platform, and budget authority all sit in partner organizations.

• 8+ years in platform, infrastructure, or systems engineering, including 3+ years managing and developing engineers, ideally at a company that scaled through a significant headcount inflection.

• Must be authorized to work in the U.S. without the need for current or future employer sponsorship.

• Open to using AI to amplify their skills and strengthen their work, demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

What you can expect as a Vanta’n:

• Industry-competitive salary and equity

• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans

• 16 weeks paid Parental Leave for all new parents

• Health & wellness stipend

• Remote workspace, internet, and cellphone stipend

• Commuter benefits for team members who report to the SF and NYC office

• Family planning benefits

• Matching 401(k) contribution with immediate vesting

• Flexible PTO policy, plus 80 hours of Sick Time

• 11 company-paid holidays

• Virtual team building activities, lunch and learns, and other company-wide events!

• Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors and may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials.

#LI-remote

At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply.

About Vanta

We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged.

Now more than ever, making security continuous—not just a point-in-time check— is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust— all in a way that's real-time and transparent.

Referral Instructions

If you are being referred for the role, please contact that person to apply on your behalf.

See the official vacancy for full qualifications and work-authorization requirements; applications were open when verified.