26 drata jobs at 24 companies in San Francisco, CA

1mo
Save
Mark Applied
Hide
Security & Compliance Operations Manager
San Francisco, California, United States
$120k-$180k/yr OnsiteFull Time
Mintlify
Mintlify: AI-powered platform for generating and hosting software documentation.
3+ YOE3+ years GRC/compliance program management with direct audit ownership, hands-on Drata (or Vanta) administration, vendor and auditor management, strong follow-through and automation bias.
Drata, Vanta
2mo
Save
Mark Applied
Hide
IT Systems Administrator
San Francisco, California, United States
$120k-$160k/yr HybridFull Time
Substack
Substack: Platform for independent writers to publish and monetize newsletters.
3+ YOE3–5 years in corporate IT/systems administration; hands-on Okta and Apple-focused MDM experience (Iru/Kandji/Jamf); familiarity with SOC 2 and compliance platforms (Vanta/Drata); strong communication and documentation skills.
Okta, SSO, SCIM, Iru, Kandji, Jamf, Vanta, Drata
3w
Save
Mark Applied
Hide
Security Engineer, Compliance Focus
Palo Alto or London
$200k-$260k/yr HybridFull Time
Volta
Volta: Building and operating GPU-dense infrastructure for AI factories.
3+ YOE3+ years in information security with compliance/GRC/audit experience, hands-on ISO 27001 or SOC 2 work, GRC platform experience, risk assessment skills, strong writing and collaboration with engineers.
Vanta, Drata, Python
3mo
Save
Mark Applied
Hide
GRC Engineer
Foster City, California, United States
$210k-$320k/yr HybridFull Time
Replit
Replit: Cloud-based platform for building and hosting software applications.
8+ YOE8+ years in GRC or information security; deep cloud (GCP/AWS) and security architecture; strong regulatory experience; automation mindset with GRC tools.
GCP, AWS, Vanta, Drata, SOC 2, ISO 27001, PCI, HIPAA
3w
Save
Mark Applied
Hide
GRC Manager
San Francisco or New York or United States
$150k-$250k/yr HybridFull Time
Baseten
Baseten: Scalable infrastructure platform for deploying and serving AI models.
5+ YOE5+ years GRC or security compliance experience in SaaS/cloud; strong knowledge of SOC 2, ISO 27001, NIST, GDPR; audit and certification management; third-party risk and cross-functional collaboration.
Vanta, Drata, Secureframe, Anecdotes, AWS, GCP
3mo
Save
Mark Applied
Hide
Federal Compliance Lead
Palo Alto or Redwood City
$130k-$170k/yr OnsiteFull Time
WindBorne Systems
WindBorne Systems: Operates smart weather balloons to provide global atmospheric data.
3+ YOE3+ years in compliance audits and US government compliance; experience with CMMC, FedRAMP, NIST frameworks; security, cloud, and GRC tooling expertise; ability to obtain security clearance.
Drata, Vanta, eMASS, Tenable Security Center, Burp, SIEM, AWS, Azure
2mo
Save
Mark Applied
Hide
Member of Technical Staff, DevSecOps
San Francisco or Europe or Australia
$180k-$280k/yr HybridFull Time
Vapi
Vapi: Build and deploy AI-powered voice agents via flexible APIs.
5+ YOE5+ years engineering experience in cloud-native SaaS; strong security experience for multi-tenant cloud environments; proficiency with AWS, Kubernetes, and Postgres; ability to write/review code and implement shift-left security.
AWS, Kubernetes, Postgres, VoIP, CI/CD, Drata, SOC 2, ISO 27001, HIPAA, GRC
4w
Save
Mark Applied
Hide
Staff IT Systems Engineer
Palo Alto, California, United States
$203k-$224k/yr OnsiteFull Time
Obsidian Security
Obsidian Security: Provides cybersecurity and threat detection for enterprise SaaS applications.
8+ YOE8+ years building and operating identity, endpoint, or platform infrastructure; deep Okta and Jamf Pro experience; IaC with Terraform/OpenTofu; scripting in Python or PowerShell; strong written and verbal communication.
Okta, Okta Verify FastPass, FIDO2, Jamf Pro, Jamf Connect, Terraform, OpenTofu, GitHub, GitHub Actions, Workload Identity Federation, Google Workspace, GAM7, HashiCorp Vault, Doppler, Secret Manager, Workato, Zscaler, Tailscale, Python, PowerShell, Rippling, Workday, Drata, Google Cloud Platform
2mo
Save
Mark Applied
Hide
Head of Security and Compliance
Livermore or California
$225k-$300k/yr HybridFull Time
HEN Technologies
HEN Technologies: Building an AI-powered intelligent ecosystem for fire suppression.
12+ YOE4+ Mgmt12+ years in information security with 4+ years leading a security function; SOC 2 leadership; strong cloud (GCP) and product security experience; hands-on technical credibility with IaC/CI/CD and vendor risk/IR processes.
Terraform, Vanta, Drata, GCP, IAM, VPC, KMS, Secret Manager, Security Command Center, Cloud Logging, GitHub, CI/CD, IaC, SAST, SCA, TLS, PKI
1w
Save
Mark Applied
Hide
Director, Compliance & AI Governance
South San Francisco, California, United States
$150k-$185k/yr OnsiteFull Time
AKASA
AKASA: Develops AI-powered automation software for healthcare revenue cycle management.
8+ YOE2+ MgmtRequires 8+ years in security compliance, GRC, or risk management, including 2+ years leading a team or function; expertise in HITRUST, SOC 2, HIPAA, AI governance, and compliance automation.
NIST AI RMF, Okta, Google Workspace, Kandji, Iru, SentinelOne, Nightfall, AWS, Vanta, Drata, Hyperproof, ChatGPT, Claude, Python, Zapier, Tray.io
2mo
Save
Mark Applied
Hide
Governance, Risk & Compliance (GRC) Manager
San Francisco or New York City or London or Sydney
$190k-$215k/yr OnsiteFull Time
Sigma Computing
Sigma Computing: Cloud-native analytics platform featuring a spreadsheet-style interface.
4+ YOE4+ years GRC experience in SaaS/tech, proven track record building GRC programs and leading SOC 2/ISO 27001/HIPAA audits, experience with ERM frameworks (COSO, ISO 31000, NIST RMF), data privacy (GDPR/CCPA), policy and control development, strong communication.
ServiceNow GRC, Archer, LogicGate, GCP, AWS, Azure, Vanta, Drata, Secureframe, Tugboat, NIST CSF, CIS Controls, OWASP, VSAs, SIGs, SQL, Python, SOC 2, ISO 27001, HIPAA, COSO, ISO 31000, NIST RMF
2mo
Save
Mark Applied
Hide
IT & Security Operations Manager
Walnut Creek, California, United States
HybridFull Time
Clearstory
Clearstory: SaaS platform for managing construction project change orders.
4+ YOE4-7 years in IT operations, security operations, or SaaS business operations; hands-on SOC 2 audit coordination; Google Workspace admin; experience with compliance platforms; SaaS vendor management; automation mindset; collaborates with CTO; proactive, process-driven.
Google Workspace, Vanta, Drata, SaaS vendor management, automation tools, MFA, 1Password
2mo
Save
Mark Applied
Hide
IT Manager (Remote, Part-time)
San Francisco, California, United States
RemotePart Time
Field Materials
Field Materials: AI platform for construction material procurement and payment automation.
4+ YOE4+ years IT administration/management experience, hands-on with Google Workspace, Slack, MDM, SSO/identity providers (e.g., Okta/Google), macOS device fleets, SOC 2/compliance support, documentation and automation skills.
Google Workspace, Slack, MDM, macOS, SSO, Okta, Drata, Vanta, SOC 2, SOC 1, ISO 27001, Google
1mo
Save
Mark Applied
Hide
Security Engineer, GRC
San Francisco or Seattle or New York City
$156k-$214k/yr HybridFull Time
Plaid
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
Strong Python and SQL, AWS and cloud security experience, Terraform and policy-as-code (OPA/Rego, Sentinel), CI/CD integration, continuous controls monitoring, GRC framework knowledge, and AI tooling experience.
Python, SQL, AWS, GitHub, Terraform, OPA/Rego, Sentinel, Mode, Claude, OpenAI, Anecdotes, Drata, Vanta, Paramify
3w
Save
Mark Applied
Hide
Director, Governance, Risk & Compliance
Redwood City, California, United States
$180k-$230k/yr HybridFull Time
Anomali
Anomali: AI-powered platform for threat intelligence and security analytics.
8+ YOE3+ Mgmt8+ years in GRC/compliance with 3+ years leadership; hands-on FedRAMP, ISO 27001, SOC 2 experience; regional cloud frameworks (DESC, Saudi NCA/CCC, IRAP); cloud security (AWS/Azure/GCP); strong stakeholder and written communication.
FedRAMP, ISO/IEC 27001:2013, ISO/IEC 27002:2013, ISO/IEC 27017:2015, ISR:2017 v.02, CSA Cloud Controls Matrix 3.0.1, SOC 2, DESC, NCA/CCC, IRAP, Vanta, Drata, ServiceNow GRC, AWS, Azure, GCP
1mo
Save
Mark Applied
Hide
Security GRC Analyst
San Francisco, California, United States
$116k-$160k/yr OnsiteFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
2+ YOE2–4 years GRC/compliance/audit or information security experience; working knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP; proficiency with GRC/audit tools and Microsoft Office or Google Workspace; strong communication skills.
SOC 2, HIPAA, ISO 27001, GxP, Microsoft Office Suite, Google Workspace, Drata, Vanta, OneTrust, ServiceNow GRC
1w
Save
Mark Applied
Hide
Lead Security Engineer
Austin or Sunnyvale
$170k-$210k/yr OnsiteFull Time
Neurophos
Neurophos: Develops high-performance photonic processors for AI inference acceleration.
8+ YOERequires 8+ years in infrastructure security, security engineering, or cybersecurity management, including 3+ years leading security programs; expertise in cloud security, networks, IAM, endpoints, incident response, and compliance.
Azure, Identity & Access Management, Role-Based Access Control, Multi-Factor Authentication, SIEM, EDR, Vanta, Drata, Infrastructure as Code, Linux, NIST CSF, ISO 27001
2mo
Save
Mark Applied
Hide
Staff+ Software Engineer, GRC Platform
San Francisco or New York City or Seattle
$405k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
8+ YOE8+ years building backend systems, data pipelines, or internal platforms; proficiency in Python or Go; experience with cloud platforms and infrastructure-as-code; strong systems thinking and experience with integrations or data infrastructure.
Python, Go, AWS, GCP, Azure, Claude, ServiceNow, Vanta, Drata, OneTrust, REST APIs, webhooks, CI/CD, ELT, ETL, infrastructure-as-code, version control
2mo
Save
Mark Applied
Hide
Governance Risk and Compliance
San Francisco or New York City or United States
$153k-$296k/yr HybridFull Time
Figma
FigmaNew York Stock Exchange: FIG: Collaborative interface design and prototyping software for teams.
4+ YOE4+ years in information security, compliance, or risk; hands-on experience with SOC 2, ISO 27001, FedRAMP, PCI-DSS, or SOX ITGC; audit experience; strong communication and cross-functional collaboration skills.
SOC 2, ISO 27001, FedRAMP, SOX ITGC, GDPR, NIS2, PCI-DSS, Vanta, Drata
1mo
Save
Mark Applied
Hide
Cloud Security Engineer
San Francisco, California, United States
HybridFull Time
BackOps AI
BackOps AI: AI-powered platform automating logistics and supply chain workflows
4+ YOE4+ years cloud security/DevSecOps experience; deep AWS/GCP and Kubernetes knowledge; Terraform/CloudFormation and CI/CD automation; IAM, secrets, SAST/DAST, container security; Python or Go programming.
AWS, GCP, Kubernetes, EKS, GKE, Terraform, CloudFormation, SAST, DAST, CI/CD, Python, Go, Vanta, Drata