Compliance Engineer

Key Responsibilities

Compliance Automation & Platform Administration

• Serve as a subject matter expert for Drata.
• Configure, maintain, and optimize Drata environments/workspaces, controls, tests, workflows, and reporting.
• Evaluate and implement new Drata features and capabilities.
• Maintain compliance evidence repositories and automated evidence collection processes.
• Develop and maintain compliance dashboards, metrics, and executive reporting.
• Assist with maintaining audit readiness throughout the year.

System Integration Management

• Integrate enterprise systems with Drata, including but not limited to:
  • Identity and Access Management platforms
  • Ticketing systems
  • Source code repositories
  • Cloud platforms
  • Endpoint management platforms
  • Vulnerability management tools
  • HR systems
  • SIEM and security monitoring solutions
• Validate integration configuration and data accuracy.
• Monitor integration health and resolve synchronization issues.
• Investigate with application owners or vendors to troubleshoot integration failures.

Compliance Monitoring & Control Management

• Monitor automated compliance tests and control monitoring activities within Drata.
• Investigate failed control tests, exceptions, and policy violations.
• Analyze compliance findings to determine root cause and business impact.
• Track remediation activities through completion.
• Ensure control evidence remains current and audit-ready.

Remediation & Corrective Actions

• Perform technical remediation for findings, within the Compliance Engineer's scope.
• Create and manage remediation plans, timelines, and status tracking.
• Validate corrective actions and confirm control effectiveness after remediation.
• Support exception management and risk acceptance processes when remediation is not feasible.

Stakeholder Collaboration

• Partner with Trust & Compliance teams to maintain control libraries and framework mappings.
• Work closely with Engineering and Infrastructure teams to improve compliance posture.
• Train system owners and Trust & Compliance team on Drata workflows and compliance requirements.
• Provide compliance guidance during technology implementations and system changes.

Required Qualifications

Education

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, Information Systems, or related field.
• Equivalent professional experience may be considered.

Experience

• Experience administering compliance automation platform Drata.
• Experience supporting SOC 2, ISO 27001, ISO 27701 or similar compliance programs.
• 3+ years of experience in Information Security, Compliance Engineering, Security Operations, or related fields.
• Experience with cloud environments including AWS and Azure.
• Experience configuring SaaS integrations and APIs.

Desired Competencies

• Strong analytical and troubleshooting skills.
• Ability to translate compliance requirements into technical controls.
• Excellent organizational skills.
• Strong stakeholder management and communication abilities.
• Attention to detail and commitment to audit readiness.
• Ability to manage multiple compliance initiatives simultaneously.
• Continuous improvement mindset.

We have great people here and are looking for more. Come join us!
 

Follow us:

• Facebook

• Instagram

• LinkedIn

• X

• YouTube

Equal Employment Opportunities at First Advantage
First Advantage is an equal opportunity employer. We are committed to providing a workplace and recruitment process that is free from unlawful discrimination, harassment, and retaliation. Employment decisions at First Advantage are based solely on qualifications, merit, and business needs. We do not discriminate in any aspect of employment on the basis of race, color, national origin, ancestry, citizenship, religion, creed, sex, gender identity, gender expression, sexual orientation, marital or family status, pregnancy, age, physical or mental disability, medical condition, genetic information, veteran or military status, or any other characteristic protected by applicable law.