Senior Compliance Advisor

🕒 vor 13 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mails für Remote-Jobs erhalten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Drata

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

Gegründet 2020

🔒 Cybersecurity

📋 Compliance

☁️ SaaS

💰 €100.000.000 Series B im 2021-11

Cybersecurity • Compliance • SaaS

Drata ist eine KI-native Plattform für Vertrauensmanagement und kontinuierliche Compliance, die Governance-, Risiko- und Compliance-(GRC)-Prozesse für Unternehmen automatisiert. Sie zentralisiert die Beweissammlung, die Überwachung von Kontrollen, die Verfolgung von Anbieter- und internen Risiken sowie die KI-gesteuerte Automatisierung von Fragebögen, um Audits, Sicherheitsprüfungen und Verkaufszyklen zu beschleunigen. Drata integriert sich in viele Systeme, unterstützt mehrere Compliance-Rahmenwerke (SOC 2, ISO 27001, HIPAA, GDPR, NIST, FedRAMP, usw. ) und richtet sich an Startups bis hin zu großen Unternehmen, die sicher skalieren und Vertrauen nachweisen möchten.

Beschreibung

• Advise customers on information security policies, control evidence, and overall audit readiness as they prepare for audits and assessments • Lead end-to-end control mapping and cross-framework crosswalk analysis • Serve as the primary compliance expert in customer-facing meetings • Lead the development and present on GRC industry best-practices and on common compliance questions received from customers • Lead ongoing internal learning and success of our team by sharing knowledge through mentorship, research, and internal presentations. • Partner with Customer Success and Account Managers in providing current customers with additional compliance advisory services as needed. • Engage with the Sales team, as needed, with responding to prospective customer questions. • Host customer-facing webinars to answer questions on audit and GRC best practices • Review marketing articles and blog posts for accuracy as needed.

🎯 Anforderungen

• Must have 4 - 6 years of experience in performing audits and assessments for compliance programs based on SOC 2 and ISO 27001/27002 • Exposure and experience in additional frameworks such as HIPAA, PCI, GDPR, CMMC, FedRAMP, CCPA, or other major compliance and controls regulations and frameworks • Strong background and understanding of GRC (Governance, Risk, and Compliance) programs, processes, functions, and operational teams • Familiarity with GRC tools and/or cybersecurity technologies; hands-on experience with a GRC automation platform is a plus. • Previous experience at consulting, audit, and advisory firms or at GRC/cybersecurity technology companies is highly preferred. • Proven self-starter able to identify priorities, take ownership of work, and learn and advise on new compliance frameworks quickly. • An ability to develop and cultivate positive relationships with customers • A proactive approach to managing your workload and day and ability to prioritize many different tasks and levels of responsibility • Constant ability to iterate and improve upon existing processes • Light technical fluency to accelerate evidence automation and customer enablement — comfort reading and interpreting API responses and/or basic scripting (Python, PowerShell, or SQL) to streamline repetitive evidence-collection tasks. • One or more industry certifications such as CISA, CISSP, CIPP/E or CIPP/US, CRISC, or ISO 27001 Lead Auditor / Lead Implementer.

🏖️ Vorteile

• Up to 100% employer-paid premiums for medical, dental, and vision coverage for employees and their dependents • Comprehensive wellness benefits and healthcare concierge services designed to support your needs beyond traditional insurance. • 401(k) plan • Company-paid life and disability insurance • Tax-advantaged spending accounts • A paid Parental Leave policy after six months of employment. • Access to Kindbody fertility and family-building benefits • Generous annual stipends for both professional and personal development • Flexible vacation policy, paid holidays, and other perks to recharge. • Stock equity to ensure that as the company grows, you share directly in that success.