Compliance Advisor, Drata

• Must have 2 - 3 years of experience in performing audits and assessments for compliance programs based on SOC2 and ISO 27001/270002
• The ideal candidate will have exposure and experience in additional frameworks such as NIST 800-171, NIST CSF, HIPAA, PCI, CMMC, or other major compliance and controls regulations and framework
• Strong background and understanding of GRC (Governance, Risk, and Compliance) programs, processes, functions, and operational teams, and helping organizations design, build, and operate their risk, security, and compliance programs
• Familiarly with GRC tools and/or cybersecurity technologies. GRC, compliance, and automation are a plus
• While not required, previous experience at consulting, audit, and advisory firms or at GRC/cybersecurity technology companies, is highly preferred
• Proven self-starter able to identify priorities, take ownership of work, and learn and advise on new compliance frameworks quickly
• An ability to develop and cultivate positive relationships with customers - make their day by providing the best possible guidance and customer experience
• Desire to work at a rapidly growing startup with a team-player mindset, building and creating something from the ground up
• A proactive approach to managing your workload and day and ability to prioritize many different tasks and levels of responsibility
• Constant ability to iterate and improve upon existing processes - challenge the status quo and improve upon the current state
• A strong ability to work within a high-speed and high-volume environment

• As a Compliance Advisor at Drata, you are a customer-facing information security and compliance expert for the world’s most advanced security and compliance automation platform
• Compliance Advisors execute within the Customer Success function at Drata and work closely with all teams to drive fast and smooth audit readiness programs, create and deliver best practices in meeting requirements for control and privacy frameworks, and advocate on behalf of customers’ needs for a rapidly growing platform
• You’ll build trust and empathy with Drata’s customers as you advise them toward a continuous and self-sufficient security, risk and compliance posture
• Advise customers in building information security policies, uploading evidence for controls and overall audit readiness as they prepare for audits and assessments against SOC2, ISO 27001/270002, HIPAA, PCI, NIST 800-171, CMMC, FedRAMP, GDPR, CCPA, etc
• Primarily serve as a compliance expert via tickets and chat, in customer-facing meetings, via email and executable work for customers, and to members of our Customer Success teams
• Lead the development and present on GRC industry best-practices and on common compliance questions received from customers for both external and internal audiences
• Lead ongoing internal learning and success of our team by sharing knowledge through mentorship, research, and internal presentations
• Host customer-facing webinars to answer questions on audit and GRC best practices
• Review marketing articles and blog posts for accuracy as needed
• Partner with Customer Success and Account Managers in providing current customers with additional compliance advisory services as needed
• Assist with internal GRC initiatives, such as internal audits and other compliance initiatives
• Engage with the Sales team, as needed, with responding to prospective customer questions

• 100% coverage for medical, dental, and vision
• $500 annually towards personal development opportunities
• Unlimited vacation policy for strong, fully charged batteries
• Flexible hours and work from home (especially these days!)
• Reach your financial goals while reducing your taxes
• Pre-tax savings plans for healthcare and dependent care
• Work From Home Stipend
• Learning Enrichment Stipends
• 16 weeks fully-paid parental leave
• 401K Retirement Plan

Total funding: $328.2m

Traditional manual compliance workflows are tedious, error-prone and extremely hard to scale, which presents special difficulties for rapidly growing companies in maintaining strong data security. Drata enables companies to manage compliance easily, by automatic monitoring and evidence collection, building a single picture of risk across the company.