Own the IAM product vision and roadmap, setting direction for authentication, authorization, user modeling, and ownership frameworks in close partnership with engineering leadership
Drive the User Model split to completion — separating IAM Users (auth/permissions) from Personnel Records (GRC/compliance) in a complex, cross-team data migration with org-wide impact
Define Ownership 3.0 — chart the path from binary object-level ownership to customer-customizable, role-based permissions that serve both startups and large enterprises
Shape Vanta's authorization strategy proactively, ensuring product teams build on shared platform capabilities rather than ad hoc permission solutions
Contribute to multi-tenant access architecture, enabling seamless cross-domain experiences for auditors, MSPs, and multi-workspace enterprise customers
Navigate complex cross-team dependencies across GRC, Trust, Collaboration, and PEX — all of which have authorization needs that this role must harmonize
Partner deeply with engineering and technical domain experts to balance enterprise complexity with comprehensibility for smaller customers
Translate technical IAM concepts into clear business value for leadership, GTM teams, and cross-functional stakeholders
Open to using AI to amplify their skills and strengthen their work
demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact

8-12+ years of product management experience, with at least 3-4 years at a Staff/Senior level in platform or infrastructure roles
Enterprise platform PM experience: you've worked on permissions, RBAC, multi-tenancy, or identity systems at scale in B2B SaaS
Systems thinking: you can reason about how authentication, authorization, and identity interconnect and affect every product surface — and explain it simply
Strong cross-functional collaboration: this role touches every team at Vanta and requires building consensus across Product, Engineering, Design, and GTM
Storytelling for technical concepts: you can explain why an authorization architecture decision matters to non-technical stakeholders and translate complex IAM concepts into clear business value
Customer empathy at multiple scales: you understand that a 10-person startup and a federal agency have vastly different permission needs, and can design systems that serve both
Comfort with ambiguity: you've navigated complex platform problems with many open design questions and competing stakeholder needs
Nice to have: Experience with policy engines (Oso, OPA, Cedar) or authorization architecture patterns
Nice to have: Background in GRC, compliance, or security-adjacent products
Nice to have: Familiarity with multi-tenant SaaS architectures

Industry-competitive salary and equity
Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
16 weeks fully-paid Parental Leave for all new parents
Health & wellness stipend
Remote workspace, internet, and cellphone stipend
Commuter benefits for team members who report to the SF and NYC office
Family planning benefits
Matching 401(k) contribution with immediate vesting
Flexible PTO policy, plus 80 hours of Sick Time
11 company-paid holidays
Virtual team building activities, lunch and learns, and other company-wide events!

Staff Product Manager, Identity Platform

Key skills