[Remote] Senior Commercial Compliance Analyst

Note: The job is a remote job and is open to candidates in USA. Rubrik is seeking a Senior Commercial Compliance Analyst to lead its commercial security audit and certification portfolio. The role manages audits end-to-end, maintains continuous audit readiness, coordinates evidence and remediation across teams, and reports progress to leadership.

Responsibilities

• Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA
• Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure
• Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble
• Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners
• Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion
• Manage the lifecycle of certifications end-to-end, including retirements and transitions
• Track and report audit status, findings, and remediation progress to leadership, using the team's Jira-based tracking dashboards
• Partner with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule
• Collaborate with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle (RMLC)
• Support Customer Trust Enablement by ensuring audit and certification outputs are readily usable to answer customer security inquiries
• Leverage AI and automation to streamline evidence gathering, control testing, and audit workflows

Skills

• 5+ years of experience in security compliance, audit management, or GRC
• Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
• Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines
• Strong project management skills with the ability to manage multiple concurrent audit cycles
• Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation
• Strong written and verbal communication skills
• Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors
• Detailed oriented

Benefits

• Eligible for bonus potential
• Eligible for equity

Company Overview

Company H1B Sponsorship