Key Skills

Job Description

About Polestead: The standard way of managing third-party risk starts from the wrong place—an external scan—and prices coverage so high per vendor that teams only assess a tiny shortlist and hope for the best. Polestead (polestead.com) inverts the model. We built an Inside-Out Third-Party Risk Management (TPRM) platform and Critical Incident Intelligence Center (CIIC) for regulated enterprises. We ingest the entire ERP vendor master, classify every vendor across six real exposure vectors, orchestrate statutory incident clocks (DORA, NIS2, GDPR), and deploy wherever the customer demands—including single-tenant EU cloud, on-premises, or fully air-gapped with BYOK AI or Zero-AI modes. Unlike legacy vendors hiding behind "Book a Demo" qualification quizzes and mystery pricing, our product is built, our pricing is published, our release notes are public, and our full-depth Trust Center is 100% free forever. The Opportunity: The architecture is built and supported by a dedicated growth & inbound marketing engine. Now, we are looking for an entrepreneurial, technical Founding GTM Partner to own the revenue engine from the ground up. This is not a standard cog-in-the-machine SDR/AE job. We are looking for a builder with a deep cybersecurity/GRC network who wants founder-level equity upside and an aggressive revenue-share model before transitioning into a traditional salaried VP of Sales / CRO compensation structure as ARR scales. Why Polestead is a Seller’s Dream: No Smoke and Mirrors: You are selling a transparent, working product with radical differentiation against Security Ratings platforms, Compliance Automation tools, and bloated Legacy GRC. Built-In PLG & Marketing Wedges: Lead with a genuinely Free, Full-Depth Trust Center (with paid human-in-the-loop questionnaire workflows) and our "Vendor Master Live Classification" workshop. Zero Per-Vendor Rationing Objections: Prospects never have to fight procurement over per-vendor slot pricing—whole-register coverage is the default. Solved Sovereignty Objections: When EU or highly regulated prospects ask about the US CLOUD Act or AI data leakage, you win the deal on the spot with self-hosted/air-gapped deployment and BYOK/Zero-AI architecture. What You’ll Do: Own the Full-Cycle GTM Motion: Target CISOs, Heads of GRC, DPOs, and Procurement leaders across regulated mid-market and enterprise organizations (Finance, Healthcare, Critical Infrastructure, SaaS). Run Consultative Discovery & Live Mapping: Guide prospects through bringing a vendor-master export and seeing their real exposure classified live. Convert PLG & Inbound Signals: Monetize organizations adopting our Free Trust Center into paid questionnaire-response workflows, Managed SaaS, Self-Hosted TPRM, and standalone CIIC licenses. Build the Playbook: Define our ICP outreach sequences, partner channel (vCISOs, DORA/NIS2 auditors), pricing feedback loops, and eventual hiring of the sales org.

Core Responsibilities

Own the full-cycle revenue motion, targeting regulated mid-market and enterprise customers and converting inbound and product-led growth signals into paid offerings. Build the go-to-market playbook, including outreach, partner channels, pricing feedback, and the future sales organization.

Requirements

The role calls for an entrepreneurial, technically minded revenue leader with a deep cybersecurity or GRC network and the ability to build a sales engine from the ground up. It requires consultative selling to senior security, GRC, privacy, and procurement stakeholders across regulated industries.