Principal Product Manager, Agentic AI Platform

We’re looking for a Principal Product Manager, Agentic AI Platform to lead Drata’s Agentic AI strategy and execution. In this role, you will own a multi-year AI vision that spans product lines and influences company-level strategy, building AI-native experiences that help customers get real GRC work done—not just chat with their data.

You’ll sit in the AI Pillar, working across Product, Engineering, Design, GRC, and GTM teams to define, build, and scale AI agents that operate safely in customers’ environments and deliver measurable outcomes in areas like TPRM, evidence collection, control mapping, and reporting.

This is a principal-level role: you will shape strategy across multiple teams, create operating models for AI delivery at scale, and coach senior PMs while serving as a company-level evangelist for Drata’s AI-enabled product vision.

- Define a multi-year, company-level Agentic AI strategy that spans Drata product lines and major initiatives, balancing bold bets with pragmatic, stepwise execution.

- Translate that vision into clear portfolios, roadmaps, and investment frameworks for AI agents, copilots, and automation across GRC workflows.

- Continuously scan the AI landscape (models, tool use, orchestrators, evaluation methods, safety approaches) and selectively bring agentic innovations into Drata in a way that’s durable, compliant, and value-creating for customers.

- Build & execute on the AI platform strategy at Drata that will enable other teams to build AI features.

- Lead end-to-end product discovery and delivery for AI agents—from problem framing and agent design to deployment, guardrails, and post-launch optimization.

- Define success metrics and evaluation frameworks for agents (e.g., task completion, latency, precision/recall, cost envelopes, human override rates) and drive rigorous experimentation to improve them.

- Partner closely with Engineering and AI/ML leads on architecture, model selection, tool/plugin design, retrieval strategies, and constraints that keep agents safe, observable, and debuggable in production.

- Design and evolve MCP-based and related ecosystems of tools, actions, and data connectors that agents can use to take safe actions on behalf of customers.

- Define patterns for agent orchestration (multi-agent vs. single-agent, planner-executor patterns, routing, human-in-the-loop flows) and codify them into reusable building blocks for the broader product org.

- Ensure that AI agents operate reliably in real-world enterprise environments—understanding identity, permissions, rate limits, data locality, and audit requirements.

- Work with other product pillars (Platform, Core GRC, TPRM, Reporting, Integrations, etc.) to embed AI agents into their roadmaps and ship cohesive, end-to-end workflows instead of isolated features.

- Create and run cross-functional rituals that keep AI investments aligned with company goals and customer value.

- Partner with GRC experts, Sales, CS, and Solutions to capture customer needs, validate use cases, and ensure AI agents align with real audit, risk, and compliance workflows.

- Spend meaningful time with customers, prospects, and partners (including auditors) to deeply understand jobs-to-be-done, constraints, and trust expectations for AI in GRC.

- Use qualitative and quantitative insights to prioritize opportunities where AI/automation can materially reduce customer pain or drive scale, not just create novelty.

- Raise the bar on AI product quality, UX, explainability, and transparency—ensuring agents are intuitive, controllable, and aligned with customer risk postures.

- Create operating models, frameworks, and standards for how the product org builds and measures AI products (from evaluation harnesses to rollout stages and risk reviews).

- Mentor and coach senior PMs working on AI-related areas; help them sharpen strategy, storytelling, and metrics while modeling resilience and ownership in high-ambiguity environments.

- Represent Drata’s AI vision internally and externally—with customers, partners, analysts, and the broader ecosystem—helping shape how the market thinks about AI in GRC.

- 10+ years of product management experience, with significant time as a senior/lead PM owning complex, multi-team product areas.

- 3–5+ years building and shipping AI/ML or LLM-powered products, with at least 2+ years directly working on agentic systems, copilots, or autonomous workflows in production.

- Demonstrated experience designing, deploying, and iterating AI agents in production, including setting up evaluation pipelines, guardrails, and observability.

- Deep understanding of the agentic ecosystem and Model Context Protocol (MCP) or similar paradigms (tools/plugins, actions, function calling, retrieval, orchestrators).

- Strong technical fluency: comfortable reading API docs, reasoning about data and model tradeoffs, and partnering with engineering on architecture-level decisions.

- Track record of defining multi-year product strategy in ambiguous or emerging domains and influencing exec-level decisions with clear narratives and evidence.

- Experience operating in B2B SaaS; familiarity with security, compliance, or risk domains is preferred but not required.

- Exceptional written and verbal communication skills, with the ability to tell a compelling story, align diverse stakeholders, and make complex AI concepts accessible.

- Demonstrated customer-obsession, with a history of turning customer insights into high-impact product bets and shipping iteratively to learn.

- Experience in GRC, Security, or TPRM, especially building products used by risk, security, or compliance teams.

- Prior work on GRC copilots, automated evidence collection, control mapping, or AI-powered reporting.

- Experience working with auditors, regulators, or highly regulated industries.

- Public presence in the AI or product community (talks, blogs, OSS contributions, standards work) related to agents, orchestration, or responsible AI.

This role will receive a competitive base salary, benefits, and stock, typically in the form of Restricted Stock Units (RSUs). The applicable salary range for this role is: $207,700 - $256,600.