Senior Security Compliance & Audit Lead

Rubrik; Lincoln (NE); On-site; USD 135,000 - 203,000; Full time

Job summary

Rubrik is seeking a Senior Commercial Compliance Analyst to lead audit and certification management across a broad portfolio of security frameworks. You will own the process end-to-end, from evidence collection to auditor management and final reports, ensuring continuous audit readiness.

You will partner with InfoSec, IT, Legal, and Engineering to gather evidence, track findings, and drive remediation using Jira dashboards. This role supports Rubrik's governance expansion and AI initiatives.

Qualifications

• 5+ years of security compliance, audit management, or GRC experience.
• Hands-on with SOC 2, ISO 27001, ISO 42001 audits and at least one additional framework.
• Experience working with external auditors and certification bodies, including scoping and timelines.
• Strong project management skills and ability to manage multiple audit cycles.
• Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation.
• Strong written and verbal communication skills.
• Knowledge of regulatory and contractual compliance requirements for enterprise SaaS/security vendors.

Responsibilities

• Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA.
• Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure.
• Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble.
• Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners.
• Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion.
• Manage the lifecycle of certifications end-to-end, including retirements and transitions
• Track and report audit status, findings, and remediation progress to leadership, using the team's Jira-based tracking dashboards.
• Partner with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule.
• Collaborate with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle (RMLC).
• Support Customer Trust Enablement by ensuring audit and certification outputs are readily usable to answer customer security inquiries.
• Leverage AI and automation to streamline evidence gathering, control testing, and audit workflows.

Skills

Security compliance

Audit management

GRC

Tools

Jira

Job description

Rubrik is seeking a Senior Commercial Compliance Analyst to lead audit and certification management across a broad portfolio of security frameworks. You will own the process end-to-end, from evidence collection to auditor management and final reports, ensuring continuous audit readiness.

You will partner with InfoSec, IT, Legal, and Engineering to gather evidence, track findings, and drive remediation using Jira dashboards. This role supports Rubrik's governance expansion and AI initiatives.