Senior Commercial Compliance Analyst

Rubrik, Inc.

. Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA .

Posted 10/12/2026full-timeRemote • United StatesSenior💰 $135,200 - $202,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing security compliance and audit processes, including SOC 2 and ISO frameworks, while effectively collaborating with cross-functional teams to ensure continuous audit readiness and remediation of findings. Proficient in leveraging GRC tools and automation to enhance audit workflows and reporting.

Highest-signal resume keywords

Security Compliance ManagementAudit ManagementSOC 2 ExperienceISO 27001 ExperienceProject Management Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ComplianceAudit ManagementSOC 2ISO 27001ISO 42001Evidence GatheringControl TestingRegulatory ComplianceRisk ManagementRemediation

Soft Skills

Strong Communication SkillsDetail Oriented

Tools & Technologies

JiraGRC Tooling

Industry Keywords

SOC 1ISO 27017ISO 27018ISO 27701CSA STARTISAXHITRUSTHIPAACustomer Trust EnablementAI Governance

About the role

Key responsibilities & impact

Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA
Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure
Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous
Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks
Lead evaluation and scoping of emerging and planned certifications to support international and AI governance expansion
Manage the lifecycle of certifications end-to-end, including retirements and transitions
Track and report audit status, findings, and remediation progress to leadership using Jira-based tracking dashboards
Partner with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule
Collaborate with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle
Support Customer Trust Enablement by ensuring audit and certification outputs are usable for customer security inquiries
Leverage AI and automation to streamline evidence gathering, control testing, and audit workflows

Requirements

What you’ll need

5+ years of experience in security compliance, audit management, or GRC
Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines
Strong project management skills with the ability to manage multiple concurrent audit cycles
Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation
Strong written and verbal communication skills
Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors
Detailed oriented

Benefits

Comp & perks

Bonus potential
Equity
Benefits
Reasonable accommodations for qualified applicants and employees with disabilities
Equal access to growth and success for all employees globally