• Own and maintain the compliance platform (Drata), including control mapping, evidence collection, continuous monitoring, and audit workflows • Manage control documentation, policies, procedures, and supporting artifacts across multiple compliance frameworks • Perform risk assessments, vendor security reviews, and control gap analyses, and track remediation through to completion • Partner with Security, IT, and Engineering teams to ensure technical and administrative controls align with documented policies and compliance requirements • Support internal and external audits, including SOC 2, PCI DSS, and customer security reviews • Conduct periodic user access reviews and assist with access governance and RBAC validation • Develop and maintain compliance reporting, metrics, and executive ready summaries • Identify and implement automation opportunities to streamline evidence collection, access reviews, and policy lifecycle management