Compliance Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Act as a subject matter expert for Drata.

• Set up, maintain, and enhance Drata environments/workspaces, controls, tests, workflows, and reporting.

• Assess and implement new features and capabilities of Drata.

• Oversee compliance evidence repositories and automated evidence collection processes.

• Create and sustain compliance dashboards, metrics, and executive reporting.

• Aid in maintaining audit readiness throughout the year.

• Integrate enterprise systems with Drata, which includes identity and access management platforms, ticketing systems, source code repositories, cloud platforms, endpoint management tools, vulnerability management solutions, HR systems, and SIEM and security monitoring solutions.

• Validate configuration of integrations and ensure data accuracy.

• Monitor the health of integrations and resolve synchronization issues.

• Investigate integration failures in collaboration with application owners or vendors.

• Monitor automated compliance tests and control monitoring activities within Drata.

• Examine failed control tests, exceptions, and policy violations.

• Analyze compliance findings to identify root causes and business impacts.

• Track remediation activities until completion.

• Ensure control evidence remains up-to-date and audit-ready.

• Perform technical remediation for findings within the Compliance Engineer's scope.

• Develop and manage remediation plans, timelines, and status tracking.

• Validate corrective actions and confirm the effectiveness of controls post-remediation.

• Support exception management and risk acceptance processes.

• Collaborate with Trust & Compliance teams to maintain control libraries and framework mappings.

• Work alongside Engineering and Infrastructure teams to enhance compliance posture.

• Train system owners and the Trust & Compliance team on Drata workflows and compliance requirements.

• Provide compliance guidance during technology implementations and system modifications.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, Information Systems, or a related field; equivalent professional experience may be accepted.

• Experience in administering the compliance automation platform Drata.

• Familiarity with supporting SOC 2, ISO 27001, ISO 27701, or similar compliance programs.

• 3+ years of experience in Information Security, Compliance Engineering, Security Operations, or related areas.

• Experience with cloud environments, including AWS and Azure.

• Experience in configuring SaaS integrations and APIs.

• Strong analytical and troubleshooting capabilities.

• Ability to translate compliance requirements into technical controls.

• Excellent organizational skills.

• Strong stakeholder management and communication skills.

• Attention to detail and a commitment to audit readiness.

• Ability to manage multiple compliance initiatives concurrently.

• A mindset focused on continuous improvement.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday schedule.

• Opportunities for professional development and growth.

• Flexible work environment and remote work options.