Field CISO - Enterprise Security & GRC Leader

Cacheflow; United States; On-site; USD 210,000 - 350,000; Full time

Benefits offered by this job

Stock equity

Health & Wellness

Financial well-being

Family support

Growth & development

Time off & flexibility

Job summary

Drata seeks a Field Chief Information Security Officer to lead security and GRC in a senior, remote, U.S.-based role. You will be the credible security voice in customer conversations, industry events, and strategic initiatives across Americas and EMEA.

This role requires 15+ years in security/GRC, 10+ years leading teams, and 5+ years in a CISO capacity, with deep SaaS/cloud-native risk and regulatory expertise. Expect cross-functional collaboration and regular travel.

Qualifications

• 15+ years in security and GRC with leadership experience.
• Strong understanding of ISO27001, SOC 2, HIPAA, GDPR and NIST CSF.
• Excellent communication across boardroom and technical teams.
• Willingness to travel 50–75% and represent Drata publicly.

Responsibilities

• Partner with Sales, CS and Marketing on strategic enterprise opportunities.
• Lead executive briefings and CISO-to-CISO discussions to build trust.
• Represent Drata at industry conferences and regional roundtables.
• Share field insights via webinars, bylines and press opportunities.
• Advise leadership on regulatory shifts and security strategy direction.
• Shape product roadmap and GTM strategies based on field feedback.
• Provide strategic guidance to resolve high-stakes security questions.

Skills

Security leadership

Executive communication

Customer-facing collaboration

Strategic thinking

Education

CISSP / CISM / CRISC / CCSP (certs a plus)

Tools

Drata platform knowledge

Job description

Drata seeks a Field Chief Information Security Officer to lead security and GRC in a senior, remote, U.S.-based role. You will be the credible security voice in customer conversations, industry events, and strategic initiatives across Americas and EMEA.

This role requires 15+ years in security/GRC, 10+ years leading teams, and 5+ years in a CISO capacity, with deep SaaS/cloud-native risk and regulatory expertise. Expect cross-functional collaboration and regular travel.