Pinnacle Group, Inc.
Website:
pinnacle1.com
Job details:
About Pinnacle Group
Pinnacle Group is a global workforce solutions and professional services organization delivering innovative talent, technology, and business solutions to leading organizations around the world. With more than 30 years of experience, Pinnacle has grown from its roots in staffing into a diversified global organization spanning workforce solutions, managed services, technology services, and corporate operations.
Summary
Pinnacle Group is seeking a Drata Administrator – GRC & Compliance to serve as a hands-on administrator of our Drata environment and support the ongoing operation of our governance, risk, and compliance programs. This role will be responsible for configuring and maintaining Drata, managing controls and compliance evidence, supporting integrations and automated monitoring, and helping maintain continuous audit readiness. The ideal candidate has direct experience administering Drata rather than simply working within the platform and understands how technology, controls, evidence, and compliance requirements connect across an organization.
Job Description
- Administer and maintain the Drata platform, including system configuration, users, permissions, frameworks, controls, evidence sources, integrations, monitoring, and related workflows.
- Configure and maintain compliance controls and framework mappings to support programs such as SOC 2, ISO 27001, and other applicable security and compliance frameworks.
- Monitor automated controls, evidence collection, and compliance tests within Drata, investigate exceptions or failures, and coordinate remediation with appropriate control owners.
- Manage ongoing evidence collection and validation, including automated and manual evidence, to maintain continuous audit readiness.
- Support Drata integrations and connections with relevant enterprise systems and troubleshoot configuration, synchronization, monitoring, and evidence-collection issues.
- Partner with Information Security, IT, Legal, Compliance, HR, Finance, and other control owners to maintain accurate control ownership, documentation, evidence, and remediation activities.
- Support internal and external audits by organizing evidence, responding to audit requests, tracking outstanding items, and maintaining supporting documentation within Drata.
- Maintain policies, compliance documentation, risk information, vendor information, and other GRC records administered through the platform.
- Develop and maintain reporting on control health, failed or overdue controls, evidence status, remediation activities, audit readiness, and other compliance metrics.
- Identify opportunities to improve Drata configuration, automate manual compliance activities, strengthen workflows, and increase the efficiency and scalability of the GRC program.
Requirements
- Demonstrated hands-on experience administering and configuring Drata in a production environment; experience limited to uploading evidence or using Drata as a control owner is not sufficient.
- Experience configuring and managing Drata components such as controls, compliance frameworks, users and permissions, integrations/connections, automated monitoring, evidence collection, and workflows.
- Working knowledge of SOC 2 and/or ISO 27001, including controls, evidence requirements, audit preparation, remediation, and ongoing compliance readiness.
- Ability to investigate failed controls, monitoring issues, evidence gaps, and platform/configuration issues and coordinate resolution with technical and non-technical stakeholders.
- Experience working across functions such as Information Security, IT, Legal, Compliance, HR, Finance, or Internal Audit to maintain GRC processes and compliance requirements.
- Experience supporting internal or external compliance audits and working with auditors, control owners, and other stakeholders to fulfill evidence requests.
- Strong organizational, documentation, analytical, and follow-through skills with the ability to manage multiple compliance activities and deadlines.
- Experience within a professional services, consulting, technology services, staffing/workforce solutions, or similar services organization is preferred. Candidates from major consulting or professional services firms with substantive hands-on Drata administration experience are also encouraged.
Why Join Pinnacle Group?
This role provides an opportunity to take meaningful ownership of a key GRC technology platform while helping build scalable compliance operations across a growing global organization. You will work across technical and business functions, gain exposure to multiple areas of governance, risk, and compliance, and help improve how technology and automation are used to maintain continuous compliance and audit readiness.
AI Recruiting Disclosure
During the hiring process, we may use artificial intelligence (AI) tools to assist in evaluating information related to your application. These tools may help analyze job-related qualifications or assist recruiters in reviewing applications and interview responses. AI-generated information is one factor considered in our hiring process. Final employment decisions are made by qualified hiring personnel and are not based solely on AI-generated recommendations.
Instructions
Please answer the questions below, attach your resume, and email your responses to Umair.Ahmad@Pinnacle1.com and Prashanth.Santhosh@Pinnacle1.com
- Please describe your hands-on experience administering Drata. How long have you worked with the platform, what organization(s) did you support, and which areas did you personally configure or manage, such as controls, frameworks, users and permissions, integrations, automated monitoring, evidence collection, or workflows?
- Please describe your experience using Drata to support SOC 2 and/or ISO 27001 compliance and audits. What responsibilities did you personally own related to controls, evidence collection, audit preparation, exceptions, remediation, and ongoing compliance readiness?
- Please provide an example of a Drata configuration, integration, automated test, or evidence-collection issue that you personally investigated or resolved. What was the issue, what did you do, and what was the outcome?
- Do you have experience working US Hours? This role would be aligned with our US Stakeholders from 5PM to 2AM IST.
- In an effort to be respectful of your time and ensure alignment, please share your desired compensation range for this opportunity.
Click on Apply to know more.