Senior Commercial Compliance Lead: Audits & Certifications

Rubrik; Hartford (CT); Remote; USD 135,000 - 225,000; Full time

Job summary

Rubrik is seeking a Senior Commercial Compliance Analyst to lead audit and certification management, owning the portfolio of security certifications and coordinating audits end-to-end. You will work with auditors, control owners, and leadership to ensure continuous readiness, manage findings, and drive strategy across frameworks.

The role requires 5+ years in security compliance, hands-on experience with SOC 2 and ISO 27001, and strong collaboration across InfoSec, IT, Legal, and Engineering.

Qualifications

• 5+ years of experience in security compliance, audit management, or GRC.
• Hands-on experience with SOC 2 and ISO 27001 audits and at least one additional framework.
• Experience working with external auditors and certification bodies, including scoping and timelines.
• Strong project management skills and ability to manage multiple audit cycles.
• Familiarity with GRC tooling and ticketing systems for tracking evidence and remediation.

Responsibilities

• Own audit and certification calendar across multiple frameworks.
• Serve as primary contact for auditors and manage scoping, fieldwork, evidence requests, and remediation.
• Maintain mapping between controls and evidence sources to ensure continuous readiness.
• Drive coordinated audit strategy to reduce duplicate requests for control owners.
• Lead evaluation and scoping of new certifications to support expansion.
• Manage lifecycle of certifications end-to-end, including retirements and transitions.
• Track audit status, findings, and remediation progress for leadership using Jira dashboards.
• Collaborate with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close findings on schedule.
• Ensure audit outputs support Customer Trust Enablement and AI governance initiatives.
• Leverage AI/automation to streamline evidence gathering and audit workflows.

Skills

SOC 2 audits

ISO 27001

GRC tooling

Project management

Audit management

External auditors

Tools

Jira

Job description

Rubrik is seeking a Senior Commercial Compliance Analyst to lead audit and certification management, owning the portfolio of security certifications and coordinating audits end-to-end. You will work with auditors, control owners, and leadership to ensure continuous readiness, manage findings, and drive strategy across frameworks.

The role requires 5+ years in security compliance, hands-on experience with SOC 2 and ISO 27001, and strong collaboration across InfoSec, IT, Legal, and Engineering.