Senior Security Compliance & Audit Lead (Remote)

Rubrik; San Juan (PR); Remote; USD 135,000 - 225,000; Full time

Job summary

Rubrik is seeking a Senior Commercial Compliance Analyst to own its portfolio of security certifications and audits from evidence collection through auditor management to final reporting. The role drives continuous audit readiness across multiple frameworks and collaborates with InfoSec, IT, Legal, and Engineering to close findings on schedule.

You will manage certification lifecycles, partner with risk management, and leverage AI-enabled workflows to streamline evidence gathering and testing

Qualifications

• 5+ years of experience in security compliance, audit management, or GRC.
• Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus another framework.
• Experience with external auditors and certification bodies, including scoping & timelines.
• Strong project management and ability to manage multiple audit cycles.
• Familiarity with GRC tooling and ticketing systems for evidence tracking.

Responsibilities

• Own the audit and certification calendar across Rubrik's portfolio.
• Serve as the primary contact for auditors and certification bodies.
• Maintain mapping between controls and evidence sources for continuous readiness.
• Drive coordination to reduce duplicate evidence requests across frameworks.
• Lead evaluation and scoping of new certifications for international/AI governance.
• Manage end-to-end lifecycle of certifications, retirements, and transitions.
• Track and report audit status, findings, and remediation progress.
• Collaborate with control owners across InfoSec, IT, Legal, and Engineering.
• Coordinate with Risk Management to feed findings into risk registers.
• Support Customer Trust Enablement with usable audit outputs.
• Leverage AI and automation to streamline evidence gathering and testing.

Skills

Security compliance

Audit management

GRC

SOC 2 audits

ISO 27001

ISO 42001

Jira

Project management

Auditor liaison

Regulatory knowledge

Attention to detail

Tools

Jira

Job description

Rubrik is seeking a Senior Commercial Compliance Analyst to own its portfolio of security certifications and audits from evidence collection through auditor management to final reporting. The role drives continuous audit readiness across multiple frameworks and collaborates with InfoSec, IT, Legal, and Engineering to close findings on schedule.

You will manage certification lifecycles, partner with risk management, and leverage AI-enabled workflows to streamline evidence gathering and testing