Staff Product Engineer, TPRM
Drata · Hybrid - San Francisco
About this role
## Staff Product Engineer — TPRM (Third-Party Risk Management) **About Drata** Drata is building the trust layer between great companies—automating compliance, managing risk, and helping organizations prove trust continuously as they scale. Drata is a global team of 600+ professionals united by integrity, ownership, and raising the bar. **Why this role** You won’t maintain legacy compliance software—you’ll help build an **agentic AI platform** that defines what trust looks like for the next generation of companies. --- ## Job Summary Drata’s **Third-Party Risk Management (TPRM)** platform helps companies identify, assess, and continuously manage risks from vendors and other third parties. Customers use Drata to: - Maintain a complete **vendor inventory** - Collect evidence (e.g., **SOC 2 reports**, **ISO certifications**) - Evaluate evidence against their criteria using Drata’s **AI agent** - Produce **audit-ready reports** The AI accelerates assessment work—**humans remain responsible** for final risk and approval decisions. We’re looking for a **Staff Product Engineer** to build **workflows, integrations, and AI-powered experiences**—and to **own them end to end**. --- ## What you’ll do - **Own features end to end**: customer problem → design → implementation → rollout → documentation → post-launch monitoring - **Manage your own releases**: own feature-flag strategy and rollout (not just merge) - Treat **UX and documentation as part of the deliverable** - **Monitor production health** for your product area using strong signals - **Partner closely with Product**: understand the problem first; propose better approaches - Address **bugs and tech debt** as part of the work - **Build with AI**: develop and improve AI agent experiences at the core of assessment workflows --- ## What you’ll bring Technical skill is the foundation—these qualities are what set the best Product Engineers apart: - **Judgement**: see the end-to-end picture from the customer perspective - **Ownership**: rollout, UX, documentation, and production health are yours - **Comfort with ambiguity**: make meaningful progress on under-defined problems - **Multiplier effect**: mentor, unblock, and raise the bar through strong reviews - **Domain depth**: invest in understanding TPRM/vendor risk/compliance - **Clear prioritization & communication**: escalate appropriately, communicate clearly across technical and non-technical partners **Requirements** - 8–10+ years of professional software engineering experience building and owning production systems end to end - **JavaScript/TypeScript across the stack** (must have) - Backend experience with **Node.js / NestJS**; front-end experience with **React** - Experience with **event-driven architecture** and **durable workflow orchestration** (e.g., **Temporal**) - Solid grounding in **relational databases**, **testing**, **observability/telemetry**, and modern **CI/CD** - Operate across teams and product areas; own architecture and long-term technical direction - Set technical direction for others; serve as a primary escalation point - Make decisions spanning multiple areas and longer time horizons - Mentor across the team and close gaps between system parts - Plan for the long term; avoid short-term-only solutions **Bonus qualifications** - Experience in **TPRM, vendor risk, GRC, or compliance** - Experience building or working alongside **AI-powered product features** --- ## How we support you - **Shared Success**:
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.