Remote opportunity at
RubrikSenior Commercial Compliance Analyst
Rubrik is looking for a Senior Commercial Compliance Analyst to take charge of Commercial Audit and Certification Management within its Information Security organization. In this position,…
Career Tools
About This Role
Rubrik is looking for a Senior Commercial Compliance Analyst to take charge of Commercial Audit and Certification Management within its Information Security organization. In this position, the professional will manage the entire lifecycle of security certifications and coordinated audits, from gathering initial evidence and interacting with external auditors to delivering final reports and resolving findings. The company operates as a cyber resilience and enterprise artificial intelligence operations enterprise, offering solutions…
Job Description
Rubrik is looking for a Senior Commercial Compliance Analyst to take charge of Commercial Audit and Certification Management within its Information Security organization. In this position, the professional will manage the entire lifecycle of security certifications and coordinated audits, from gathering initial evidence and interacting with external auditors to delivering final reports and resolving findings. The company operates as a cyber resilience and enterprise artificial intelligence operations enterprise, offering solutions that secure, monitor, and recover workloads, data, and identities across multiple cloud environments, alongside supporting trusted artificial intelligence deployments.
This opportunity is well-suited for an experienced regulatory or security compliance specialist who excels in managing multiple concurrent audit cycles and streamlining workflows through automation or artificial intelligence tooling. The chosen candidate will coordinate with control owners across Information Security, Legal, Engineering, and Information Technology departments to maintain ongoing audit readiness. Responsibilities include tracking progress via Jira dashboards, integrating audit outcomes into risk management processes, and aiding Customer Trust Enablement by supplying certification outputs for client security reviews. Compensation includes a target base salary range of USD 150,200 to USD 225,400 per year for United States locations such as New York City, Seattle, the Washington D.C. Metro area, and the San Francisco Bay Area, alongside eligibility for equity, bonuses, and benefits.
Responsibilities
- Manage the audit and certification calendar covering frameworks such as SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR, TISAX, HITRUST, and HIPAA
- Act as the main point of contact for certification bodies and external auditors to handle scoping, fieldwork, and evidence requests
- Maintain ongoing audit readiness by linking compliance controls directly to source evidence
- Consolidate overlapping evidence requirements across multiple frameworks to minimize duplicate tasks
- Evaluate and scope planned or emerging certifications to aid international and artificial intelligence governance expansion
- Report remediation progress, audit findings, and status updates to leadership using Jira dashboards
- Collaborate with teams across Engineering, Legal, Information Technology, and Information Security to collect evidence and resolve findings
- Partner with Risk Management to ensure audit results link to the broader remediation lifecycle and risk register
- Support Customer Trust Enablement by providing audit outputs for client security inquiries
- Utilize automation and artificial intelligence to optimize audit workflows, control testing, and evidence collection
Requirements
- Minimum of 5 years of professional background in security compliance, GRC, or audit management
- Hands-on practice managing SOC 2, ISO 27001, and ISO 42001 audits, plus at least one additional framework
- Direct experience interacting with certification bodies and external auditors for scoping and timeline negotiations
- Demonstrated project management abilities capable of handling multiple concurrent audit cycles
- Familiarity with ticketing systems and GRC tools such as Jira for tracking remediation and evidence
- Proficiency in written and verbal communication
- Understanding of contractual and regulatory compliance requirements applicable to enterprise security and SaaS vendors
- Detail-oriented work approach
Core Skills
Benefits
- Base salary compensation
- Bonus potential
- Equity
- Standard employee benefits
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for the Senior Commercial Compliance Analyst role?
For United States locations including the San Francisco Bay Area, New York City, Seattle, and the Washington D.C. Metro area, the base pay range is USD 150,200 to USD 225,400 per year. For all other United States offices and remote assignments, the base pay range is USD 135,200 to USD 202,800 per year.
What experience is required for this position?
Candidates must have at least five years of experience in audit management, security compliance, or GRC, including hands-on experience managing SOC 2, ISO 27001, and ISO 42001 audits alongside at least one additional framework.
What additional compensation is offered beyond the base salary?
The role is eligible for bonus potential, equity, and employee benefits.
How can applicants request accommodations during the hiring process?
Qualified applicants needing assistance or accommodations can contact human resources at hr@rubrik.com.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.