Sign in
AboutPrivacyTerms
Senior Commercial Compliance Analyst
RubrikRubrik

Senior Commercial Compliance Analyst

United StatesRemoteFull-time
Pay Range: $135k - $225k / annual
Posted 2 days ago · Oct 14
Apply

Job Description

About the team:

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information.

About the role:

Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure.

What you'll do:

  • Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA.
  • Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure.
  • Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble.
  • Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners.
  • Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion.
  • Manage the lifecycle of certifications end-to-end, including retirements and transitions
  • Track and report audit status, findings, and remediation progress to leadership, using the team's Jira-based tracking dashboards.
  • Partner with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule.
  • Collaborate with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle (RMLC).
  • Support Customer Trust Enablement by ensuring audit and certification outputs are readily usable to answer customer security inquiries.
  • Leverage AI and automation to streamline evidence gathering, control testing, and audit workflows.

Experience you'll need:

  • 5+ years of experience in security compliance, audit management, or GRC
  • Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
  • Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines.
  • Strong project management skills with the ability to manage multiple concurrent audit cycles.
  • Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation.
  • Strong written and verbal communication skills
  • Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors.
  • Detailed oriented

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

US (SF Bay Area, DC Metro, NYC, Seattle) Pay Range

$150,200—$225,400 USD

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

US2 (all other US offices/remote) Pay Range

$135,200—$202,800 USD

Join Us in Securing and Accelerating the World's AI Transformation

Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes.

Linkedin | X (formerly Twitter) | Instagram | Rubrik.com

Inclusion @ Rubrik

At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.

Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.

Our inclusion strategy focuses on three core areas of our business and culture:

  • Our Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.

  • Our Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.

  • Our Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.

Equal Opportunity Employer/Veterans/Disabled

Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.

Rubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact . Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.

EEO IS THE LAW

NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Originally posted on Himalayas

View job

GRC Analyst

bswift

  • United States
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Security Engineer

Metabase

  • United States
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Futures Risk Program Manager

Robinhood

  • Chicago, IL
Apply
Added 15 hrs ago
View job

Senior InfoSec Analyst

MongoDB

  • Gurugram
Apply
Added 15 hrs ago
View job

Threat Research Engineer

GitLab

  • Bangalore, India
Apply
Added 15 hrs ago
View job

Senior Security Engineer, Security Incident Response Team

Datadog

  • New York, New York, USA
Apply
Added 15 hrs ago
View job

Security Engineer - Network Edge Security

Block

  • Bay Area, CA, United States of America
Apply
Added 15 hrs ago
View job

Compliance Trust Analyst

Abnormal AI

  • Remote - USA
  • Remote
Apply
Added 15 hrs ago
View job

Information Security Engineer

First Quality

  • United States
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Cyber Security Coordinator

RecargaPay

  • Brazil
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Senior Security Operations Engineer

Samsara

  • Poland
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Senior Security Engineer, Network & Zero Trust

Sezzle

  • Brazil
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Cyber Security Analyst

World Business Lenders

  • Guatemala
  • Remote
  • Full-time
Apply
16 hrs ago
View job

Manager, Risk Mitigation Solutions- Remote

Velera

  • United States
  • Remote
  • Full-time
Apply
16 hrs ago
View job

Head of Infrastructure Security

SOFTSWISS

  • Poland
  • Remote
  • Full-time
Apply
17 hrs ago
View job

Architect - Cyber Security

Axonect

  • Malaysia
  • Remote
  • Full-time
Apply
17 hrs ago
View job

Sr. Security Consultant - GRC

SHI International Corp.

  • United States
  • Remote
  • Full-time
Apply
17 hrs ago
View job

Senior Security Application Engineer - Automation & Detection

Solidigm

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

AI Red Team Specialist - Remote | Up to $22/hr

mercor

  • India
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Junior Compliance Consultant

Sigma Software

  • Ukraine
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Security Platform Engineer I

Tusker

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Sr Information Security Administrator

Kirtland Credit Union

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

AI Security Engineer

Bright Vision Technologies

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Ethical Hacker & Pentester

Trade Technology

  • Brazil
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Staff Software Engineer, Identity and Access Management

Kong

  • Canada
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Security Analyst (Governance and Trust)

Chainguard

  • Canada
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Senior Security Advisor

Arctiq

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

Cybersecurity & Data Security Associate (Contract Position)

peopleworth

  • South Africa
  • Remote
  • Contract
Apply
19 hrs ago
View job

Senior Security Operations Engineer

Samsara

  • Netherlands
  • Remote
  • Full-time
Apply
19 hrs ago
View job

GRC Manager - Technology Risk & Governance

Pinnacle Group

  • United States
  • Remote
  • Full-time
Apply
20 hrs ago
Page 1 of 123Next
RubrikRubrik

Senior Commercial Compliance Analyst

United StatesRemoteFull-time
Pay Range: $135k - $225k / annual
Posted 2 days ago · Oct 14
Apply

Job Description

About the team:

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information.

About the role:

Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure.

What you'll do:

  • Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA.
  • Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure.
  • Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble.
  • Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners.
  • Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion.
  • Manage the lifecycle of certifications end-to-end, including retirements and transitions
  • Track and report audit status, findings, and remediation progress to leadership, using the team's Jira-based tracking dashboards.
  • Partner with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule.
  • Collaborate with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle (RMLC).
  • Support Customer Trust Enablement by ensuring audit and certification outputs are readily usable to answer customer security inquiries.
  • Leverage AI and automation to streamline evidence gathering, control testing, and audit workflows.

Experience you'll need:

  • 5+ years of experience in security compliance, audit management, or GRC
  • Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
  • Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines.
  • Strong project management skills with the ability to manage multiple concurrent audit cycles.
  • Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation.
  • Strong written and verbal communication skills
  • Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors.
  • Detailed oriented

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

US (SF Bay Area, DC Metro, NYC, Seattle) Pay Range

$150,200—$225,400 USD

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

US2 (all other US offices/remote) Pay Range

$135,200—$202,800 USD

Join Us in Securing and Accelerating the World's AI Transformation

Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes.

Linkedin | X (formerly Twitter) | Instagram | Rubrik.com

Inclusion @ Rubrik

At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.

Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.

Our inclusion strategy focuses on three core areas of our business and culture:

  • Our Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.

  • Our Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.

  • Our Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.

Equal Opportunity Employer/Veterans/Disabled

Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.

Rubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact . Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.

EEO IS THE LAW

NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Originally posted on Himalayas