Senior Security Compliance & Certification Lead

Rubrik; Lansing (MI); On-site; USD 135,000 - 225,000; Full time

Job summary

Rubrik in the United States is seeking a Senior Commercial Compliance Analyst to own the portfolio of security certifications and coordinated audits from evidence collection through auditor management to final report delivery. You will ensure audit readiness is continuous and audit findings are tracked to closure.

You will serve as the primary contact for external auditors, manage scoping, fieldwork, evidence requests, and remediation through to closure, while mapping controls to evidence

Qualifications

• 5+ years of experience in security compliance, audit management, or GRC.
• Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework.
• Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines.
• Strong project management skills with the ability to manage multiple concurrent audit cycles.
• Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation.
• Strong written and verbal communication skills.
• Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors.
• Detailed oriented

Responsibilities

• Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA.

Skills

Security compliance

SOC 2

ISO 27001

Audits with external bodies

Project management

Jira

Written & verbal communication

Regulatory knowledge

Tools

Jira

Job description

Rubrik in the United States is seeking a Senior Commercial Compliance Analyst to own the portfolio of security certifications and coordinated audits from evidence collection through auditor management to final report delivery. You will ensure audit readiness is continuous and audit findings are tracked to closure.

You will serve as the primary contact for external auditors, manage scoping, fieldwork, evidence requests, and remediation through to closure, while mapping controls to evidence