Senior Compliance Advisor

Our Mission & Values: At Drata, we help companies earn and keep the trust of their users, customers, partners, and prospects. We’re the proof layer that shows great companies deserve the trust they aim to build. We live our values every day. Built on Trust means consistency is everything. Act with Integrity by always doing the right thing. Being Customer-Obsessed keeps the people we serve at the center of our work. Competitive Fire drives us to push ourselves harder than anyone else. Diversity brings unique perspectives that lead to better solutions. Automation First ensures we save time and money by making efficiency a priority. Our Culture & Work Style 🚀 At Drata, we’re not just building software - we’re building a mindset. Everything we do springs from: Be a Driver (Owner‑Operator Mentality): Own your work. Improve relentlessly. Deliver results. Move at Drata Speed (Precision & Velocity): Fast decisions. Quick learning. Immediate impact. Stay Mission-Driven (Customer‑Obsessed): Challenge assumptions. Deliver value. Stay hungry. If you thrive when you’re empowered, energized, and working with smart, mission-driven people, you’ll feel at home here. Why Join The Drata Team? The best way to understand the Driver’s Mindset is to see it in action. We’re an award-winning, mission-driven team of 600+ people worldwide , united by a culture that values trust, speed, and continuous growth. See the Speed: Watch our CEO, Adam Markowitz, discuss the hyper-growth journey, from $0 to $100M ARR in just four years Hear the Voice of the Team : Explore our "Life at Drata" page for employee testimonials on our collaborative and the growth opportunities available. Experience the Impact : See why we are consistently recognized on Fortune's Best Workplaces lists. Connect with Us on Socials: LinkedIn - follow us for company updates, employee stories, and career news. Job Summary: As a Senior Compliance Advisor at Drata, you are a customer-facing information security and compliance expert for the world’s most advanced security and compliance automation platform. Senior Compliance Advisors execute within the Professional Services function of the Customer Success organization at Drata and work closely with all teams to drive fast and smooth audit readiness programs, create and deliver best practices in meeting requirements for control and privacy frameworks, and advocate on behalf of customers’ needs for a rapidly growing platform. You’ll build trust and empathy with Drata’s customers as you advise them toward a continuous and self-sufficient security, risk and compliance posture. What you’ll do: Advise customers on information security policies, control evidence, and overall audit readiness as they prepare for audits and assessments against SOC 2, ISO 27001/27002, HIPAA, PCI, NIST 800-171, CMMC, FedRAMP, GDPR, CCPA, and related frameworks. Lead end-to-end control mapping and cross-framework crosswalk analysis, aligning customer custom controls and audit evidence request lists (IRLs) to the Drata Control Framework (DCF). Serve as the primary compliance expert in customer-facing meetings, via email and executable work for customers, and to members of our Customer Success teams. Lead the development and present on GRC industry best-practices and on common compliance questions received from customers for both external and internal audiences. Lead ongoing internal learning and success of our team by sharing knowledge through mentorship, research, and internal presentations. Partner with Customer Success and Account Managers in providing current customers with additional compliance advisory services as needed. Engage with the Sales team, as needed, with responding to prospective customer questions. Host customer-facing webinars to answer questions on audit and GRC best practices Review marketing articles and blog posts for accuracy as needed. What you’ll bring: Must have 4 - 6 years of experience in performing audits and assessments for compliance programs based on SOC 2 and ISO 27001/27002 The ideal candidate will have exposure and experience in additional frameworks such as HIPAA, PCI, GDPR, CMMC, FedRAMP, CCPA, or other major compliance and controls regulations and framework Strong background and understanding of GRC (Governance, Risk, and Compliance) programs, processes, functions, and operational teams, and helping organizations design, build, and operate their risk, security, and compliance programs Familiarity with GRC tools and/or cybersecurity technologies; hands-on experience with a GRC automation platform is a plus. While not required, previous experience at consulting, audit, and advisory firms or at GRC/cybersecurity technology companies, is highly preferred. Proven self-starter able to identify priorities, take ownership of work, and learn and advise on new compliance frameworks quickly. An ability to develop and cultivate positive relationships with customers - make their day by providing the best possible gu