Field CISO

About the role

This position is for a senior security and GRC leader who will act as Drata's public-facing expert. You will represent the company's vision and expertise to customers, industry peers, and at public events.

Key facts

What you'll do

• Support strategic enterprise sales opportunities by providing expert security and GRC insights.
• Conduct executive briefings and CISO-to-CISO discussions to build customer confidence.
• Represent Drata at industry conferences and community events across the Americas and EMEA.
• Contribute to webinars, articles, and press engagements to enhance Drata's market presence.
• Advise executive leadership on evolving regulatory landscapes and industry risks.
• Guide the company's response to significant industry shifts and new compliance requirements.
• Elevate security and GRC standards through knowledge sharing both internally and externally.
• Provide sales teams with the necessary security and GRC context for technical discussions.
• Utilize your existing network to foster trust and open doors for Drata.
• Collaborate with marketing and go-to-market teams on executive events and speaking engagements.
• Influence Drata's product roadmap and go-to-market strategy based on field experience and customer needs.
• Address complex, undefined security and GRC challenges with strategic direction.
• Ensure all external interactions reflect Drata's security and GRC program standards.
• Support critical company initiatives alongside the internal security and GRC team.
• Partner with the CISO to prioritize and manage industry event participation.

Requirements

• A minimum of 15 years of experience in security and GRC.
• This includes at least 10 years managing security and GRC teams.
• And at least 5 years serving in a CISO, Deputy CISO, or equivalent senior leadership role.
• Deep understanding of compliance frameworks such as ISO 27001, SOC 2, HIPAA, FedRAMP, GDPR, NIST CSF, PCI DSS, and CCPA, with practical experience discussing them.
• Strong communication abilities, comfortable in both executive and technical discussions.
• A recognized reputation and network within the security and GRC community.
• Proven ability to operate as a senior individual contributor, providing strategic direction.
• Aptitude for navigating ambiguity and translating evolving challenges into clear strategies.
• Experience collaborating with go-to-market teams in customer-facing scenarios.
• A history of thought leadership through speaking, writing, or public engagement.
• Familiarity with SaaS and cloud-native environments, and an understanding of AI's impact on security and GRC.
• Knowledge of compliance automation platforms, including Drata.
• Readiness to travel frequently for customer meetings and industry events.
• A thoughtful approach to using AI responsibly in your work.

Nice to have

• Professional certifications like CISSP, CISM, CRISC, or CCSP are beneficial.

Skills & tools

• Security and GRC
• ISO 27001
• SOC 2
• HIPAA
• FedRAMP
• GDPR
• NIST CSF
• PCI DSS
• CCPA
• SaaS
• Cloud-native environments
• AI in security and GRC
• Compliance automation platforms (e.g., Drata)

Practical notes

• This role is ideally based on the East Coast of the U.S. or requires willingness to work EST hours for Americas and EMEA coverage.
• Expect 30-50% travel, including international trips.
• Benefits include comprehensive health coverage with up to 100% employer-paid premiums, 401(k), company-paid life and disability insurance, and family support benefits including paid parental leave and fertility support.
• A generous annual stipend is provided for professional and personal development.
• Flexible vacation policy, paid holidays, and other time-off benefits are offered.
• Stock equity (RSUs) is part of the compensation package.

About the company

Drata is a company that operates in the technology industry, specifically in the field of artificial intelligence. Basis Set Ventures, a venture capital firm, has invested in Drata, indicating that Drata is likely an early-stage startup building with artificial intelligence. Basis Set Ventures is based in San Francisco, California, and has a significant amount of assets under management, totaling $850 million. As a venture capital firm that specializes in investing in early-stage startups, Basis Set Ventures likely provides Drata with the necessary funding to grow and develop its products. The fact that Basis Set Ventures is one of the earliest venture capital firms to specialize in artificial intelligence suggests that Drata is part of a growing industry. Venture capital firms like Basis Set Ventures play a crucial role in supporting startups like Drata, providing them with the necessary resources to succeed. Drata is likely focused on developing innovative solutions using artificial intelligence, given the expertise of its investor. The company's operations are likely influenced by the trends and developments in the technology industry, particularly in the field of artificial intelligence.