Senior Commercial Compliance & Audit Lead

Rubrik Job Board; Oregon; Hybrid; USD 135,000 - 225,000; Full time

Benefits offered by this job

Bonus potential

Equity

Benefits

Job summary

Rubrik is seeking a Senior Commercial Compliance Analyst to lead the audit and certification management program. You will own the portfolio of security certifications and coordinate audits from evidence collection to final reporting, ensuring continuous readiness and timely remediation.

In this role, you will work with external auditors, control owners across InfoSec, IT, and Legal, and leverage Jira dashboards to track progress.

Qualifications

• 5+ years of experience in security compliance, audit management, or GRC.
• Strong knowledge of SOC 2, ISO 27001, ISO 42001 and related frameworks.
• Experience working with external auditors and certification bodies.
• Strong project management and cross-functional collaboration skills.
• Familiarity with regulatory and contractual requirements for enterprise SaaS vendors.

Responsibilities

• Own the audit and certification calendar across Rubrik's active portfolio, including SOC 1/2 and multiple ISO standards.
• Serve as primary contact for external auditors, managing scoping, fieldwork, evidence requests, and remediation through to closure.
• Maintain mapping between controls and evidence sources for continuous audit readiness.
• Drive coordinated audit strategy to reduce duplication of evidence requests across frameworks.
• Lead evaluation and scoping of new certifications to support expansion.
• Manage lifecycle of certifications end-to-end, including retirements and transitions.
• Track and report audit status, findings, and remediation progress using Jira-based dashboards.
• Collaborate with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close findings on schedule.
• Link audit findings to risk management processes and remediation lifecycles.
• Support Customer Trust Enablement by ensuring audit outputs are readily usable for customer inquiries.

Skills

Security compliance

Audit management

GRC

Project management

Communication

Regulatory knowledge

Detail-oriented

Tools

Jira

Job description

Rubrik is seeking a Senior Commercial Compliance Analyst to lead the audit and certification management program. You will own the portfolio of security certifications and coordinate audits from evidence collection to final reporting, ensuring continuous readiness and timely remediation.

In this role, you will work with external auditors, control owners across InfoSec, IT, and Legal, and leverage Jira dashboards to track progress.