Drata Administrator

· Administer and maintain the Drata platform, including system configuration, users, permissions, frameworks, controls, evidence sources, integrations, monitoring, and related workflows.

· Configure and maintain compliance controls and framework mappings to support programs such as SOC 2, ISO 27001, and other applicable security and compliance frameworks.

· Monitor automated controls, evidence collection, and compliance tests within Drata, investigate exceptions or failures, and coordinate remediation with appropriate control owners.

· Manage ongoing evidence collection and validation, including automated and manual evidence, to maintain continuous audit readiness.

· Support Drata integrations and connections with relevant enterprise systems and troubleshoot configuration, synchronization, monitoring, and evidence-collection issues.

· Partner with Information Security, IT, Legal, Compliance, HR, Finance, and other control owners to maintain accurate control ownership, documentation, evidence, and remediation activities.

· Support internal and external audits by organizing evidence, responding to audit requests, tracking outstanding items, and maintaining supporting documentation within Drata.

· Maintain policies, compliance documentation, risk information, vendor information, and other GRC records administered through the platform.

· Develop and maintain reporting on control health, failed or overdue controls, evidence status, remediation activities, audit readiness, and other compliance metrics.

· Identify opportunities to improve Drata configuration, automate manual compliance activities, strengthen workflows, and increase the efficiency and scalability of the GRC program.