Senior Commercial Compliance Analyst

Rubrik; United States; Remote; USD 130,000 - 200,000; Full time

Job summary

Rubrik is seeking a Senior Security Compliance professional to own the audit and certification calendar across SOC 1, SOC 2, ISO 27001, ISO 42001, CSA STAR, TISAX, HITRUST and HIPAA. You will partner with cross-functional teams to manage evidence, findings and remediation while coordinating with external auditors and certification bodies to ensure continuous audit readiness.

You will drive efficient audit strategy, scope emerging certifications for international AI governance, and leverage

Qualifications

• 5+ years in security compliance, audit management or GRC.
• Hands-on SOC 2, ISO 27001 and ISO 42001 audit management plus one additional framework.
• Experience working directly with external auditors and certification bodies.
• Strong written and verbal communication, detail oriented.

Responsibilities

• Own the audit and certification calendar across multiple frameworks.
• Serve as primary contact for external auditors and certification bodies.
• Maintain mapping between controls and evidence sources for continuous readiness.
• Drive audit strategy to reduce duplicate evidence requests.
• Lead scoping of emerging certifications for international AI governance.
• Track and report audit status and remediation to leadership.
• Collaborate with cross-functional owners on evidence and findings.
• Feed audit findings into risk register and remediation lifecycle.
• Use AI and automation to streamline evidence gathering and testing.

Skills

Security compliance

Audit management

GRC

Auditor liaison

Project management

Jira

Tools

Jira

Job description

Responsibilities

• Own the audit and certification calendar across SOC 1, SOC 2, ISO 27001, ISO 42001, CSA STAR, TISAX, HITRUST and HIPAA
• Serve as primary contact for external auditors and certification bodies through findings closure
• Maintain mapping between compliance controls and evidence sources for continuous audit readiness
• Drive coordinated audit strategy to reduce duplicate evidence requests across frameworks
• Lead scoping of emerging certifications supporting international and AI governance expansion
• Track and report audit status and remediation progress to leadership
• Partner with InfoSec, IT, Legal and Engineering control owners on evidence and findings
• Feed audit findings into the risk register and remediation lifecycle with Risk Management
• Use AI and automation to streamline evidence gathering and control testing

Requirements

• 5+ years in security compliance, audit management or GRC
• Hands-on SOC 2, ISO 27001 and ISO 42001 audit management plus one additional framework
• Experience working directly with external auditors and certification bodies
• Strong project management across multiple concurrent audit cycles
• Familiarity with GRC tooling and ticketing systems such as Jira
• Knowledge of regulatory and contractual compliance for enterprise SaaS vendors
• Strong written and verbal communication, detail oriented

About the Company

• Rubrik is the Security and AI Operations Company, focused on data protection, cyber resilience and enterprise AI.