Pinnacle Group exists to connect people with opportunity. For the last 25 years, we've done exactly that by living our core values of putting people first, delivering excellence in all we do, and giving back to the communities in which we live and work. We are a leading workforce solutions company supporting the talent needs of global leaders in financial services, technology, communications, utilities, and transportation and we are one of the largest women and minority-owned companies in our industry. Our team of service-driven, energetic, and diverse professionals is well-respected in our industry and our leadership team is aligned and focused on taking the company to the next level. If you're looking for a new opportunity where you can truly make a difference, we hope you'll apply for a position with us.

Job Summary

· Administer and maintain the Drata platform, including system configuration, users, permissions, frameworks, controls, evidence sources, integrations, monitoring, and related workflows.

· Configure and maintain compliance controls and framework mappings to support programs such as SOC 2, ISO 27001, and other applicable security and compliance frameworks.

· Monitor automated controls, evidence collection, and compliance tests within Drata, investigate exceptions or failures, and coordinate remediation with appropriate control owners.

· Manage ongoing evidence collection and validation, including automated and manual evidence, to maintain continuous audit readiness.

· Support Drata integrations and connections with relevant enterprise systems and troubleshoot configuration, synchronization, monitoring, and evidence-collection issues.

· Partner with Information Security, IT, Legal, Compliance, HR, Finance, and other control owners to maintain accurate control ownership, documentation, evidence, and remediation activities.

· Support internal and external audits by organizing evidence, responding to audit requests, tracking outstanding items, and maintaining supporting documentation within Drata.

· Maintain policies, compliance documentation, risk information, vendor information, and other GRC records administered through the platform.

· Develop and maintain reporting on control health, failed or overdue controls, evidence status, remediation activities, audit readiness, and other compliance metrics.

· Identify opportunities to improve Drata configuration, automate manual compliance activities, strengthen workflows, and increase the efficiency and scalability of the GRC program.

Qualifications

Requirements

· Demonstrated hands-on experience administering and configuring Drata in a production environment; experience limited to uploading evidence or using Drata as a control owner is not sufficient.

· Experience configuring and managing Drata components such as controls, compliance frameworks, users and permissions, integrations/connections, automated monitoring, evidence collection, and workflows.

· Working knowledge of SOC 2 and/or ISO 27001, including controls, evidence requirements, audit preparation, remediation, and ongoing compliance readiness.

· Ability to investigate failed controls, monitoring issues, evidence gaps, and platform/configuration issues and coordinate resolution with technical and non-technical stakeholders.

· Experience working across functions such as Information Security, IT, Legal, Compliance, HR, Finance, or Internal Audit to maintain GRC processes and compliance requirements.

· Experience supporting internal or external compliance audits and working with auditors, control owners, and other stakeholders to fulfill evidence requests.

· Strong organizational, documentation, analytical, and follow-through skills with the ability to manage multiple compliance activities and deadlines.

· Experience within a professional services, consulting, technology services, staffing/workforce solutions, or similar services organization is preferred. Candidates from major consulting or professional services firms with substantive hands-on Drata administration experience are also encouraged.