Drata Administrator

This is a fully remote position, open to applicants in India.

📋 Description

• Oversee and manage the Drata platform, which includes system setup, user management, permissions, frameworks, controls, evidence sources, integrations, monitoring, and associated workflows.

• Set up and maintain compliance controls and framework mappings for SOC 2, ISO 27001, and other relevant security and compliance frameworks.

• Monitor automated controls, gather evidence, and conduct compliance tests; investigate any exceptions or failures and collaborate with control owners for remediation.

• Handle ongoing automated and manual evidence collection and validation to ensure continuous audit readiness.

• Assist with Drata integrations and connections to enterprise systems; troubleshoot issues related to configuration, synchronization, monitoring, and evidence collection.

• Collaborate with Information Security, IT, Legal, Compliance, HR, Finance, and other control owners to uphold control ownership, documentation, evidence, and remediation efforts.

• Facilitate internal and external audits by organizing evidence, addressing audit requests, tracking outstanding items, and maintaining documentation within Drata.

• Keep policies, compliance documentation, risk information, vendor details, and other GRC records managed through the platform up to date.

• Create and maintain reports on control health, overdue or failed controls, evidence status, remediation efforts, audit preparedness, and compliance metrics.

• Enhance Drata configuration, automate manual compliance tasks, improve workflows, and boost the efficiency and scalability of the GRC program.

⛳️ Requirements

• Proven hands-on experience in administering and configuring Drata in a production setting; experience limited to merely uploading evidence or acting as a control owner is not adequate.

• Proficient in configuring and managing Drata components such as controls, compliance frameworks, users and permissions, integrations/connections, automated monitoring, evidence collection, and workflows.

• Solid understanding of SOC 2 and/or ISO 27001, including controls, evidence requirements, audit preparation, remediation, and ongoing compliance readiness.

• Capable of investigating failed controls, monitoring challenges, evidence gaps, and platform/configuration issues, while coordinating resolutions with both technical and non-technical stakeholders.

• Experience in collaborating across functions such as Information Security, IT, Legal, Compliance, HR, Finance, or Internal Audit to uphold GRC processes and compliance obligations.

• Background in supporting internal or external compliance audits and working with auditors, control owners, and other stakeholders to meet evidence requests.

• Strong organizational, documentation, analytical, and follow-through capabilities with the ability to manage various compliance activities and deadlines.

• Experience in a professional services, consulting, technology services, staffing/workforce solutions, or similar services organization is favored.

• Candidates from leading consulting or professional services firms with significant hands-on Drata administration experience are also encouraged to apply.

🏝️ Benefits

• Comprehensive health and wellness plans.

• Opportunities for professional development and growth.

• Flexible work arrangements to support work-life balance.

• Collaborative and innovative work environment.