.png)
As a Senior Compliance Advisor at Drata, you are a sales-facing information security and compliance expert, helping prospective customers understand and navigate compliance and risk management as they evaluate Drata’s security and compliance automation platform. You will support the Solutions Engineering and Sales teams, providing expertise on security frameworks, audit readiness, and governance, risk, and compliance (GRC) best practices. Your role will involve building trust with prospects, addressing their compliance concerns, and demonstrating how Drata can support their security and compliance objectives.
What you’ll do:
- Advise prospective customers on best practices for achieving and maintaining compliance with frameworks such as SOC 2, ISO 27001/27002, HIPAA, PCI, NIST 800-171, CMMC, FedRAMP, GDPR, and CCPA.
- Partner with the Sales and Solutions Engineering teams to address compliance-related objections, guide prospects through their audit readiness journey, and demonstrate Drata’s platform capabilities.
- Serve as a compliance expert during sales calls, demos, webinars, and proof-of-concept engagements, ensuring prospects understand how Drata aligns with their compliance needs.
- Create and deliver compliance-related presentations for external audiences, including webinars, sales enablement sessions, and thought leadership discussions.
- Support RFPs and security assessments by providing compliance guidance and assisting with customer due diligence questionnaires.
- Collaborate with Marketing to review compliance-related content, blog posts, and whitepapers for accuracy and clarity.
- Educate internal teams on compliance trends, customer concerns, and evolving industry standards to enhance sales team effectiveness.
- Maintain a deep understanding of Drata’s compliance automation capabilities and help position them effectively during the sales process.
What you’ll bring:
- 4 - 6 years of experience in compliance audits, assessments, or advisory services, particularly in SOC 2 and ISO 27001/27002 frameworks.
- Experience in additional frameworks such as HIPAA, PCI, GDPR, CMMC, FedRAMP, CCPA, or other major compliance standards is highly preferred.
- Strong background in Governance, Risk, and Compliance (GRC) programs and the ability to translate compliance requirements into business value.
- Familiarity with GRC tools and cybersecurity technologies; experience with compliance automation platforms is a plus.
- Previous experience in a customer-facing or sales support role (e.g., pre-sales, solutions consulting, advisory, or technical sales).
- Ability to simplify complex compliance concepts and communicate them effectively to both technical and non-technical audiences.
- Proven self-starter mindset, capable of managing multiple priorities in a fast-paced, high-growth startup environment.
- Collaborative and team-oriented approach, working closely with sales, marketing, and customer success teams to drive revenue and customer confidence.
- Proactive problem-solving skills and a continuous improvement mindset to enhance processes and support a growing sales organization.
Benefits:
- Healthcare: 90-100% paid premiums for medical, dental, and vision plans for employee and dependents + on demand health care concierge
- HSA, FSA, & DCFSA: Pre-tax savings plans for healthcare and dependent care, with up to a $600 annual employer contribution to the HSA plan (if enrolled in HSA medical plan)
- 100% paid short and long term disability plus life + AD&D benefits
- Learning & Development: $500 annually towards professional development opportunities + $250 annually towards personal development opportunities
- Flexible Time Off: Flexible vacation policy for strong, fully charged batteries
- 16 Weeks Paid Parental Leave: An inclusive policy to ensure you have time with your newborn, newly adopted, or foster child
- Work Remotely: Flexible hours and work from home + $1,000 annually to cover necessary business related items for your home office
- 401K: Reach your financial goals while reducing your taxes
This role will receive a competitive base salary, variable compensation, benefits, and stock, typically in the form of Restricted Stock Units (RSUs). The applicable range of On-Target Earnings (OTE) for each US-based role is based on where the employee works and is aligned to one of 3 tiers based on the cost of labor for that geographic area. The expected OTE ranges for this role are set forth below, subject to change.
Tier 1: $155,500 - $192,000
Tier 2: $140,000 - $172,800
Tier 3: $124,400 - $153,600
You can view which tier applies to where you plan to work here. A variety of factors are considered when determining someone’s leveling and compensation–including a candidate’s professional background and experience. These ranges may be modified in the future and final offer amounts may vary from the amounts listed above.
Drata is on a mission to serve as the trust layer between great companies.
Drata is a trust management platform that uses AI-driven automation to modernize governance, risk, and compliance, helping thousands of businesses develop a more secure, proactive, and risk-aware organization to continuously maintain trust with customers.
We all recognize the importance of earning and keeping the trust of our customers when it comes to protecting their data. We know how burdensome achieving and maintaining a strong GRC posture can be with the rise in compliance regulations. It’s a manual, redundant, error-prone, and unscalable process - and it only grows more complex and expensive over time.
Our team of SaaS, security, compliance, and audit experts have built a better way - with automation
Employment at Drata is based solely upon individual merit and qualifications directly related to professional competence. We strictly prohibit unlawful discrimination or harassment on the basis of race, color, religion, veteran status, national origin, ancestry, pregnancy status, sex, gender identity or expression, age, marital status, mental or physical disability, medical condition, sexual orientation, or any other characteristics protected by law. We also make reasonable accommodations to meet our obligations under laws protecting the rights of the disabled.
