Senior Compliance Advisor - EMEA (Remote)

Careers at Drata; United Kingdom; Remote; GBP 95,000 - 119,000; Full time

Job summary

Join a rapidly growing startup as a Senior Compliance Advisor, where you'll leverage your expertise in information security and compliance to guide clients through their audit readiness journey. This role focuses on building strong customer relationships while advocating for their needs in a dynamic environment. You'll also have the opportunity to lead internal learning initiatives and present industry best practices. With a flexible work-from-home policy and a commitment to professional development, this position offers a unique chance to grow your career in an innovative and supportive setting.

Benefits

Supplemental Health Benefits

Professional Development Budget

Flexible Time Off

Paid Parental Leave

Work from Home Stipend

Qualifications

• 4-6 years of experience in audits and compliance programs.
• Strong understanding of GRC programs and frameworks.

Responsibilities

• Advise customers on information security policies and audit readiness.
• Lead development of GRC best practices and host webinars.

Skills

Audit and Compliance

GRC (Governance, Risk, and Compliance)

Customer Relationship Management

Problem Solving

Communication Skills

Education

Bachelor's Degree in a related field

Tools

GRC Tools

Cybersecurity Technologies

Job description

As a Senior Compliance Advisor at Drata, you are a customer-facing information security and compliance expert for the world’s most advanced security and compliance automation platform. Senior Compliance Advisors execute within the Customer Success function at Drata and work closely with all teams to drive fast and smooth audit readiness programs, create and deliver best practices in meeting requirements for control and privacy frameworks, and advocate on behalf of customers’ needs for a rapidly growing platform. You’ll build trust and empathy with Drata’s customers as you advise them toward a continuous and self-sufficient security, risk and compliance posture.

This position must work standard business hours in the GMT or Central European Time Zone.

What you’ll do:

• Advise customers in building information security policies, uploading evidence for controls and overall audit readiness as they prepare for audits and assessments against GDPR, DORA, NIS2, ISO 27001/270002, SOC2, HIPAA, PCI, etc.
• Primarily serve as a compliance expert via tickets and inquiries, in customer-facing meetings, via email and executable work for customers, and to members of our Customer Success teams.
• Lead the development and present on GRC industry best-practices and on common compliance questions received from customers for both external and internal audiences.
• Lead ongoing internal learning and success of our team by sharing knowledge through mentorship, research, and internal presentations.
• Host customer-facing webinars to answer questions on audit and GRC best practices.
• Review marketing articles and blog posts for accuracy as needed.
• Partner with Customer Success and Account Managers in providing current customers with additional compliance advisory services as needed.
• Assist with internal GRC initiatives, such as internal audits and other compliance initiatives.
• Engage with the Sales team, as needed, with responding to prospective customer questions.

What you’ll bring:

• Must have 4 - 6 years of experience in performing audits, assessments, and/or consulting or development work for compliance programs based on GDPR, DORA, or NIS2.
• The ideal candidate will have exposure and experience in additional frameworks such as ISO 27001/270002, HIPAA, PCI, or other major compliance and controls regulations and framework.
• Strong background and understanding of GRC (Governance, Risk, and Compliance) programs, processes, functions, and operational teams, and helping organizations design, build, and operate their risk, security, and compliance programs.
• Familiarity with GRC tools and/or cybersecurity technologies. GRC, compliance, and automation are a plus.
• While not required, previous experience at consulting, audit, and advisory firms or at GRC/cybersecurity technology companies, is highly preferred.
• Proven self-starter able to identify priorities, take ownership of work, and learn and advise on new compliance frameworks quickly.
• An ability to develop and cultivate positive relationships with customers - make their day by providing the best possible guidance and customer experience.
• Desire to work at a rapidly growing startup with a team-player mindset, building and creating something from the ground up.
• A proactive approach to managing your workload and day and ability to prioritize many different tasks and levels of responsibility.
• Constant ability to iterate and improve upon existing processes - challenge the status quo and improve upon the current state.
• A strong ability to work within a high-speed and high-volume environment.

Benefits:

• Supplemental Health Benefits Offered.
• Learning & Development: $500 annually towards professional development opportunities + $250 annually towards personal development opportunities.
• Flexible Time Off: Flexible vacation policy for strong, fully charged batteries.
• 16 Weeks Paid Parental Leave: An inclusive policy to ensure you have time with your newborn, newly adopted, or foster child.
• Work Remotely: Flexible hours and work from home + $1,000 annually to cover necessary business related items for your home office.

This role will receive a competitive base salary, variable compensation, benefits, and stock, typically in the form of Restricted Stock Units (RSUs). The expected range of On-Target Earnings for this role is GBP £95,600 - £118,100, subject to change.

A variety of factors are considered when determining someone’s leveling and compensation–including a candidate’s professional background and experience. These ranges may be modified in the future and final offer amounts may vary from the amounts listed above.

Employment at Drata is based solely upon individual merit and qualifications directly related to professional competence. We strictly prohibit unlawful discrimination or harassment on the basis of race, color, religion, veteran status, national origin, ancestry, pregnancy status, sex, gender identity or expression, age, marital status, mental or physical disability, medical condition, sexual orientation, or any other characteristics protected by law. We also make reasonable accommodations to meet our obligations under laws protecting the rights of the disabled.