Senior Compliance & Certification Lead (Audit Management)

Rubrik; United States; On-site; USD 150,000 - 225,000; Full time

Job summary

Rubrik is seeking a Senior Commercial Compliance Analyst to own end-to-end audit readiness, certifications, and remediation across multiple frameworks. You will coordinate auditors, manage evidence, and drive strategy to minimize duplication while expanding governance for international and AI initiatives.

You will partner with InfoSec, IT, Legal, and Engineering to gather evidence, track findings, and ensure timely closure. A strong background in SaaS compliance and Jira is essential.

Qualifications

• 5+ years in security compliance, audit management, or GRC.
• Hands-on with SOC 2, ISO 27001, ISO 42001 audits plus another framework.
• Experience with external auditors and scoping/audit timelines.
• Strong project management to handle concurrent audit cycles.
• Familiarity with GRC tooling and ticketing systems (e.g., Jira).
• Excellent written and verbal communication skills.
• Knowledge of regulatory requirements for enterprise SaaS vendors.

Responsibilities

• Own the audit and certification calendar across the active portfolio.
• Serve as primary contact for auditors and certification bodies.
• Maintain mapping between controls and evidence sources for continuous readiness.
• Drive audit strategy to consolidate evidence requests and reduce duplication.
• Lead scoping of emerging certifications to support expansion.
• Manage lifecycle of certifications, including retirements and transitions.
• Track and report audit status, findings, and remediation progress.
• Collaborate with cross-functional teams to gather evidence and close findings.
• Support customer trust by ensuring outputs answer security inquiries.

Skills

5+ years security compliance

SOC 2 & ISO 27001 audits

External auditor liaison

Project management

GRC tooling (Jira)

Strong communication skills

Regulatory knowledge (enterprise SaaS)

Tools

Jira

Job description

Rubrik is seeking a Senior Commercial Compliance Analyst to own end-to-end audit readiness, certifications, and remediation across multiple frameworks. You will coordinate auditors, manage evidence, and drive strategy to minimize duplication while expanding governance for international and AI initiatives.

You will partner with InfoSec, IT, Legal, and Engineering to gather evidence, track findings, and ensure timely closure. A strong background in SaaS compliance and Jira is essential.