[Hiring] Field Chief Information Security Officer @Drata

Role Description

As Drata scales, we want our security and GRC leadership to be able to meet our customers’ needs in more places at once—in strategic customer conversations, on stage at industry events, and in the broader conversations happening across our security and GRC communities. We’re looking for a Field Chief Information Security Officer to join Drata’s Security & GRC organization, reporting directly to our SVP, Security & CISO, to help carry our vision to a wider audience. Your primary mission: be Drata's credible, practitioner-level security and GRC voice in the field.

This role is a senior, remote, U.S.-based security and GRC leadership role, ideally based on the East Coast to cover both the Americas and EMEA regions. As one of the most senior individual contributor roles in Drata's Security & Trust organization, this role shapes how Drata responds to the industry, informs the product experience, and aids in the strategic positioning of Drata’s future to acutely meet industry needs. This position is built for someone who has led security and GRC programs before and is excited to bring that experience directly to our customers, prospects, and industry peers.

You’ll work closely with our go-to-market, customer success, and marketing teams, but your foundations are still rooted in technical security and GRC leadership—that is what will make you credible in the room among peers and is critical to the success of this role. Given the nature of our platform, this person will spend as much time in GRC conversations as in traditional security conversations due to the complementary nature and inseparability of these functions.

Responsibilities

• Partner with Sales, Customer Success, and Marketing teams on strategic enterprise and F500/G2000 opportunities.
• Lead executive briefings and CISO-to-CISO conversations to build trust with prospective customers.
• Represent Drata at industry conferences, CISO dinners, and regional roundtables across the Americas, EMEA, and APAC regions.
• Share insights from the field through webinars, panels, bylines, and press opportunities.
• Advise CISO, CMO, CRO, and executive leadership on emerging regulatory shifts and industry risks.
• Provide strategy and direction for company-wide responses to major industry shifts.
• Raise the overall security and GRC bar across Drata and industry-wide through knowledge sharing.
• Equip sales teams with security and GRC context for technical conversations.
• Leverage relationships in the security and GRC community to build trust for Drata.
• Partner with Marketing and GTM leadership to plan executive events and speaking engagements.
• Influence product roadmap and go-to-market growth strategy based on field feedback.
• Address high-stakes security and GRC questions facing the business.
• Work alongside internal security and GRC team members on critical initiatives.

Qualifications

• 15+ years of progressive experience in security and GRC.
• 10+ years leading and managing teams.
• 5+ years in the CISO seat (as a CISO, Deputy CISO, or equivalent senior security and GRC leader).
• Strong grasp of compliance frameworks including ISO 27001, SOC 2, HIPAA, FedRAMP, GDPR, NIST CSF, PCI DSS, and CCPA.
• Excellent communication skills for both boardroom and technical discussions.
• Genuine reputation and network within the security and GRC community.
• Experience operating at the senior individual contributor level of a security or GRC organization.
• Comfort working with ambiguity and turning undefined problems into clear strategy.
• Experience partnering with go-to-market teams in customer-facing conversations.
• Track record of thought leadership through speaking, writing, or public engagement.
• Familiarity with SaaS and cloud-native environments.
• Familiarity with compliance automation platforms like Drata.
• Openness to travel regularly and represent Drata’s security and GRC program publicly.
• A curious, thoughtful approach to using AI responsibly.

Requirements

• 15+ years in security and GRC, including 10+ years leading and managing teams.
• 5+ years in the CISO seat (as a CISO, Deputy CISO, or equivalent senior security and GRC leader).
• Ideally based on the East Coast of the U.S. or willing to work EST hours.
• Willingness to travel regularly - 50-75% for customer meetings, conferences, and field events.
• Professional certifications such as CISSP, CISM, CRISC, or CCSP are a plus.

Benefits

• Stock equity to ensure shared success as the company grows.
• Up to 100% employer-paid premiums for medical, dental, and vision coverage for employees and their dependents.
• Comprehensive financial benefits including a 401(k) plan and company-paid life and disability insurance.
• Paid Parental Leave policy after six months of employment.
• Generous annual stipends for professional and personal development.
• Flexible vacation policy, paid holidays, and other perks to recharge.

Salary

This role will receive a competitive base salary, benefits, and stock, typically in the form of Restricted Stock Units (RSUs). The applicable salary range for this role is: $210,000 - $350,000.