- Administer and maintain the Drata platform, including system configuration, users, permissions, frameworks, controls, evidence sources, integrations, monitoring, and related workflows.
- Configure and maintain compliance controls and framework mappings to support programs such as SOC 2, ISO 27001, and other applicable security and compliance frameworks.
- Monitor automated controls, evidence collection, and compliance tests within Drata, investigate exceptions or failures, and coordinate remediation with appropriate control owners.
- Manage ongoing evidence collection and validation, including automated and manual evidence, to maintain continuous audit readiness.
- Support Drata integrations and connections with relevant enterprise systems and troubleshoot configuration, synchronization, monitoring, and evidence-collection issues.
- Partner with Information Security, IT, Legal, Compliance, HR, Finance, and other control owners to maintain accurate control ownership, documentation, evidence, and remediation activities.
- Support internal and external audits by organizing evidence, responding to audit requests, tracking outstanding items, and maintaining supporting documentation within Drata.
- Maintain policies, compliance documentation, risk information, vendor information, and other GRC records administered through the platform.
- Develop and maintain reporting on control health, failed or overdue controls, evidence status, remediation activities, audit readiness, and other compliance metrics.
- Identify opportunities to improve Drata configuration, automate manual compliance activities, strengthen workflows, and increase the efficiency and scalability of the GRC program.

Qualifications

Requirements





- Demonstrated hands-on experience administering and configuring Drata in a production environment; experience limited to uploading evidence or using Drata as a control owner is not sufficient.
- Experience configuring and managing Drata components such as controls, compliance frameworks, users and permissions, integrations/connections, automated monitoring, evidence collection, and workflows.
- Working knowledge of SOC 2 and/or ISO 27001, including controls, evidence requirements, audit preparation, remediation, and ongoing compliance readiness.
- Ability to investigate failed controls, monitoring issues, evidence gaps, and platform/configuration issues and coordinate resolution with technical and non-technical stakeholders.
- Experience working across functions such as Information Security, IT, Legal, Compliance, HR, Finance, or Internal Audit to maintain GRC processes and compliance requirements.
- Experience supporting internal or external compliance audits and working with auditors, control owners, and other stakeholders to fulfill evidence requests.
- Solid organizational, documentation, analytical, and follow-through skills with the ability to manage multiple compliance activities and deadlines.
- Experience within a professional services, consulting, technology services, staffing/workforce solutions, or similar services organization is preferred. Candidates from major consulting or professional services firms with substantive hands-on Drata administration experience are also encouraged.

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Drata Administrator (India)
🏢 Pinnacle Group
📍 India