Senior Compliance Analyst, Drata
$109.3-168.7k
Salary dependent on location + Restricted Stock Units
Security and compliance automation
Posted today
Security and compliance automation
501-1000 employees
Posted today
$109.3-168.7k
Salary dependent on location + Restricted Stock Units
501-1000 employees
Company mission
To help companies earn and keep the trust of their users, customers, partners, and prospects.
Role
Who you are
- You have 5-7 years of experience
- You have a passion for developing solutions at the intersection of Compliance, Privacy and Security
- You have a solid understanding of how things operate in a SaaS environment
- You have a solid understanding of Risk Management and Vendor Management to lead discussions and manage risks and vendors
- You are knowledgeable in SOC 2 , ISO 27001, HIPAA, and an awareness of FedRAMP, NIST CSF, and others, and know how to audit internally, and facilitate external auditor assessments against these
- You like taking the road less traveled when it makes sense, you analyze problems and find better ways to meet the business need
- Black Hat, White Hat or Wizard Hat, we don’t care, we just want you to be passionate about security and helping our industry mature
- We live in the cloud so we need you to have AWS, GCP or Azure experience
- Watson is that you? We need you to be able to do in-depth troubleshooting to problem solve to help us continually improve all facets of the program
- We are people who are curious and love to learn new things, we want you to have that desire as well
- Be Awesome! You are going to need to work well with your peers because they are often coming to you with problems while frustrated, be kind and clearly communicate to them to make things all better
- Certifications (CISA, CISM, CISSP, ISC, IAPP) or equivalent experience
What the job involves
- As a Senior Compliance Analyst on Drata’s team, you’ll be at the forefront of innovation—helping ensure Drata not only meets its security and compliance objectives, but also sets the industry standard for GRC and Trust Management
- By spearheading creative solutions and embracing Automation–one of Drata’s core values–you’ll help shape the future of GRC and Trust Management programs, all while continually incorporating new ideas into the Drata platform to help our thousands of customers also using the platform
- Don’t just trust the process—improve it! You’ll focus on automating the compliance process and turning Drata into the unrivaled go-to product for security and compliance, giving detailed feedback to product teams based on your daily usage
- You’ll devise innovative solutions for challenges like vendor management, onboarding/offboarding, facilitating smooth and seamless internal and external assessments, helping ensure both Drata and its customers stay ahead of the curve
- Watch the watchers! Oversee our security and engineering teams to confirm they’re consistently meeting Drata’s security and compliance standards and control requirements. You’ll be the eyes that help maintain our rigorous standards—and the voice that pushes for continuous improvement
- Build and Maintain the Trust of Customers. At times, our thousands of customers have questions. You’ll be helping them get answers to those questions either through our Trust Center or responding to questionnaires. Our external auditors are also part of this process
- You’ll be working to get our external assessors the answers and artifacts they need to complete our external audits
- Hack the planet! (Who doesn’t love Hackers?) You’ll partner with the security team on bug bounties, blue/red team engagements, penetration tests, and other exciting projects—because true compliance goes hand in hand with creative, proactive security
- Code is for building solutions—not how you communicate. You’ll collaborate seamlessly with your peers and clearly articulate the “why” behind our controls, processes, and requirements – making sure everyone understands the bigger picture and moves forward together
- Write the ancient artifacts of documentation. From environment configurations to policies and procedures, you’ll craft thorough documentation that actually makes sense to the business, our auditors, and our customers–ensuring all know exactly how things work
- Stay curious. You enjoy exploring the latest tech trends, testing out new tools, and finding ways they can enhance our security and compliance strategies
- By weaving together automation, innovation, and clear communication, you’ll play a pivotal role in shaping Drata’s future and redefining what it means to be secure and compliant in a modern, fast-paced world. Let’s revolutionize the industry—together!
Our take
Traditional manual compliance workflows are tedious, error-prone and extremely hard to scale, which presents special difficulties for rapidly growing companies in maintaining strong data security. Drata enables companies to manage compliance easily, by automatic monitoring and evidence collection, building a single picture of risk across the company.
The company has several competitors offering compliance automation solutions, including Vanta and Secureframe , but Drata is unique in automating the tasks themselves rather than generating notifications for teams to action. This approach has garnered Drata a client base of thousands of companies including bambooHR, Notion and Abnormal.
Drata has grown swiftly since its 2020 founding. Iconiq Growth and GGV Capital have led Drata's impressive funding rounds. It intends to use its influx of cash to invest heavily in research and development, and to roll out new features for auditors and startups.
Freddie
Company Specialist at Welcome to the Jungle
Insights
90% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Dec 2022
$200m
SERIES C
Nov 2021
$100m
SERIES B
Total funding: $328.2m
Company benefits
- 100% coverage for medical, dental, and vision
- $500 annually towards personal development opportunities
- Unlimited vacation policy for strong, fully charged batteries
- Flexible hours and work from home (especially these days!)
- Reach your financial goals while reducing your taxes
- Pre-tax savings plans for healthcare and dependent care
- Work From Home Stipend
- Learning Enrichment Stipends
- 16 weeks fully-paid parental leave
- 401K Retirement Plan
Company values
- BUILT ON TRUST: Trust is our most precious asset, earned through consistency over time.
- ACT WITH INTEGRITY: We do the right thing, regardless of whether anyone else is looking.
- CUSTOMER-OBSESSIVE: Everything we do revolves around the customer at the center of our purpose.
- COMPETITIVE FIRE: It burns from within - we push ourselves harder than anyone else ever could.
- DIVERSITY: Unique perspectives provide a better shared view of a problem and its possible solutions.
- AUTOMATION-FIRST: Our products save companies time and money - efficiency is paramount.
Company HQ
University City, San Diego, CA
Articles
Leadership
Adam Markowitz
(CEO)Previously VP & GM at Instructure. Founder & former CEO of Portfolium. Has worked in Mechanical and Aerospace Engineering.
Daniel Marashlian
(CTO)Former Technical Advisory Board Member at the National University. Previously Senior Director Of Engineering at Instructure. Co-founded Portfolium and RapidEngage.
Troy Markowitz
(COO)Advisor at Knack and former Contributor to Forbes. Previously the VP of Strategy, Growth Markets at Instructure. Prior experience in Business Development.
Share this job
View 14 more jobs at Drata