Senior Audit & Certification Lead (SOC/ISO)

Rubrik; Frankfort (KY); Remote; USD 135,000 - 225,000; Full time

Benefits offered by this job

Bonus potential

Equity

Benefits

Job summary

Rubrik seeks a Senior Commercial Compliance Analyst to own Rubrik's portfolio of security certifications and end-to-end audit management, from evidence collection to final report delivery. You will coordinate audits across SOC 1/2, ISO family, CSA STAR, and more, partnering with control owners to ensure continuous readiness.

You will work with InfoSec, IT, Legal, and Engineering to gather evidence, manage findings, and track remediation in Jira, while leveraging AI to streamline processes and

Qualifications

• 5+ years of experience in security compliance, audit management, or GRC.
• Hands‑on experience with SOC 2, ISO 27001, ISO 42001 audits, plus at least one more framework.
• Experience working with external auditors and certification bodies, including scoping and timelines.
• Strong project management skills with multiple concurrent audit cycles.
• Familiarity with GRC tooling and ticketing systems (e.g., Jira).
• Strong written and verbal communication skills.
• Knowledge of regulatory and contractual compliance requirements for enterprise SaaS vendors.
• Detail oriented.

Responsibilities

• Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA.

Skills

Security compliance

Audit management

GRC

Project management

Jira

Communication skills

Regulatory knowledge

Detail oriented

Tools

Jira

Job description

Rubrik seeks a Senior Commercial Compliance Analyst to own Rubrik's portfolio of security certifications and end-to-end audit management, from evidence collection to final report delivery. You will coordinate audits across SOC 1/2, ISO family, CSA STAR, and more, partnering with control owners to ensure continuous readiness.

You will work with InfoSec, IT, Legal, and Engineering to gather evidence, manage findings, and track remediation in Jira, while leveraging AI to streamline processes and