Drata 管理员
Drata Administrator
Pinnacle Group 的使命是将人们与机会连接起来。过去25年里，我们一直通过践行“以人为本、在所有工作中追求卓越、回馈社区”的核心价值观来实现这一目标。我们是一家领先的劳动力解决方案公司，为金融、科技、通信、公用事业和交通等行业的全球领先企业满足人才需求，我们是该行业中最大的女性和少数族裔拥有的公司之一。我们的服务导向、充满活力且多元化的专业团队在业内备受尊敬，我们的领导团队保持一致并专注于将公司带向新的高度。如果您正在寻找一个能真正产生影响的新机会，希望您能申请我们的职位。
职位概述
- 管理和维护 Drata 平台，包括系统配置、用户、权限、框架、控制项、证据来源、集成、监控及相关工作流程。
- 配置和维护合规控制项及框架映射，以支持 SOC 2、ISO 27001 等项目及其他适用的安全和合规框架。
- 监控 Drata 中的自动化控制项、证据收集和合规测试，调查异常或失败情况，并与相应的控制负责人协调修复。
- 管理持续的证据收集和验证，包括自动和手动证据，以保持持续的审计准备状态。
- 支持 Drata 与相关企业系统的集成和连接，排查配置、同步、监控和证据收集问题。
- 与信息安全、IT、法律、合规、人力资源、财务和其他控制负责人合作，确保控制权归属、文档、证据和修复活动的准确性。
- 通过组织证据、回应审计请求、跟踪未决事项并在 Drata 内维护支持性文档来支持内部和外部审计。
- 维护通过平台管理的政策、合规文档、风险信息、供应商信息和其他 GRC 记录。
- 开发和维护关于控制健康状况、失败或逾期控制项、证据状态、修复活动、审计准备情况及其他合规指标的报告。
- 识别改进 Drata 配置、自动化手动合规活动、加强工作流程并提高效率的机会。
查看英文原文
Pinnacle Group exists to connect people with opportunity. For the last 25 years, we've done exactly that by living our core values of putting people first, delivering excellence in all we do, and giving back to the communities in which we live and work. We are a leading workforce solutions company supporting the talent needs of global leaders in financial services, technology, communications, utilities, and transportation and we are one of the largest women and minority-owned companies in our industry. Our team of service-driven, energetic, and diverse professionals is well-respected in our industry and our leadership team is aligned and focused on taking the company to the next level. If you're looking for a new opportunity where you can truly make a difference, we hope you'll apply for a position with us.
Job Summary
- Administer and maintain the Drata platform, including system configuration, users, permissions, frameworks, controls, evidence sources, integrations, monitoring, and related workflows.
- Configure and maintain compliance controls and framework mappings to support programs such as SOC 2, ISO 27001, and other applicable security and compliance frameworks.
- Monitor automated controls, evidence collection, and compliance tests within Drata, investigate exceptions or failures, and coordinate remediation with appropriate control owners.
- Manage ongoing evidence collection and validation, including automated and manual evidence, to maintain continuous audit readiness.
- Support Drata integrations and connections with relevant enterprise systems and troubleshoot configuration, synchronization, monitoring, and evidence-collection issues.
- Partner with Information Security, IT, Legal, Compliance, HR, Finance, and other control owners to maintain accurate control ownership, documentation, evidence, and remediation activities.
- Support internal and external audits by organizing evidence, responding to audit requests, tracking outstanding items, and maintaining supporting documentation within Drata.
- Maintain policies, compliance documentation, risk information, vendor information, and other GRC records administered through the platform.
- Develop and maintain reporting on control health, failed or overdue controls, evidence status, remediation activities, audit readiness, and other compliance metrics.
- Identify opportunities to improve Drata configuration, automate manual compliance activities, strengthen workflows, and increase the efficiency and scalability of the GRC program.
Qualifications
Requirements
- Demonstrated hands-on experience administering and configuring Drata in a production environment; experience limited to uploading evidence or using Drata as a control owner is not sufficient.
- Experience configuring and managing Drata components such as controls, compliance frameworks, users and permissions, integrations/connections, automated monitoring, evidence collection, and workflows.
- Working knowledge of SOC 2 and/or ISO 27001, including controls, evidence requirements, audit preparation, remediation, and ongoing compliance readiness.
- Ability to investigate failed controls, monitoring issues, evidence gaps, and platform/configuration issues and coordinate resolution with technical and non-technical stakeholders.
- Experience working across functions such as Information Security, IT, Legal, Compliance, HR, Finance, or Internal Audit to maintain GRC processes and compliance requirements.
- Experience supporting internal or external compliance audits and working with auditors, control owners, and other stakeholders to fulfill evidence requests.
- Strong organizational, documentation, analytical, and follow-through skills with the ability to manage multiple compliance activities and deadlines.
- Experience within a professional services, consulting, technology services, staffing/workforce solutions, or similar services organization is preferred. Candidates from major consulting or professional services firms with substantive hands-on Drata administration experience are also encouraged.
Originally posted on Himalayas