drata - Field CISO

• 15+ years of progressive experience in security and GRC, including 10+ years leading and managing teams and 5+ years in the CISO seat (as a CISO, Deputy CISO, or equivalent senior security and GRC leader). • A strong grasp of the compliance frameworks our customers care about — including ISO 27001, SOC 2, HIPAA, FedRAMP, GDPR, NIST CSF, PCI DSS, and CCPA — and the practical experience to speak to them with real depth. • Excellent communication skills, with the ability to move comfortably between boardroom conversations and technical deep-dives. • A genuine reputation and network within the security and GRC community, built through your own experience leading programs and engaging with peers. • A track record of operating at the most senior individual contributor level of a security or GRC organization, where leadership and peers already come to you for strategic direction, not just execution. • Comfort working with ambiguity — turning undefined, fast-moving problems like regulatory direction, market shifts, or systemic risk into clear strategy, not just talking points. • Experience partnering with go-to-market teams in customer-facing conversations, and comfort with the pace and cadence of enterprise sales cycles. • A track record of thought leadership—speaking, writing, or other public and social engagement that reflects your experience and perspective. • Familiarity with SaaS and cloud-native environments, along with a thoughtful perspective on how AI is shaping both security and GRC risk and practice. • Familiarity with compliance automation platforms like Drata, so you can speak to our own product with the same credibility you bring to security and GRC itself. • Openness to travel regularly and represent Drata’s security and GRC program in a public-facing capacity. • A curious, thoughtful approach to using AI in your own work, with the judgment to apply it responsibly. • 15+ years in security and GRC, including 10+ years leading and managing security and GRC teams and 5+ years in the CISO seat (as a CISO, Deputy CISO, or equivalent senior security and GRC leader). • Ideally either based on the East Coast of the U.S. or willing to work EST hours to support coverage across the Americas and EMEA time zones. • Willingness to travel regularly - 50-75% (including international travel) for customer meetings, conferences, and field events. • Professional certifications such as CISSP, CISM, CRISC, or CCSP are a plus (though real, tenured experience carries more weight). • How we support you: • At Drata, our people are our strongest advantage—and we prove it with support that exceeds industry standards. Our total rewards package is designed to power your well-being, accelerate your growth, and keep your work-life balance thriving. • Explore how we invest in your Life at Drata https://drata.com/about/life-at-drata?utm_source=chatgpt.com.