SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 135,200 - 225,400 / annual
Rubrik is seeking a Senior Commercial Compliance Analyst to lead the company's audit and certification management function. You will own Rubrik's comprehensive portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery.
Key responsibilities include:
- Owning the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, and HIPAA.
- Serving as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure.
- Maintaining the mapping between compliance controls and underlying evidence sources to ensure audit readiness is continuous rather than a point-in-time scramble.
- Driving coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners.
- Leading evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion.
- Managing the lifecycle of certifications end-to-end, including retirements and transitions.
- Tracking and reporting audit status, findings, and remediation progress to leadership using Jira-based tracking dashboards.
- Partnering with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule.
- Collaborating with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle.
- Supporting Customer Trust Enablement by ensuring audit and certification outputs are readily usable to answer customer security inquiries.
- Leveraging AI and automation to streamline evidence gathering, control testing, and audit workflows.
Rubrik is the Security and AI Operations Company, leading at the intersection of data protection, cyber resilience, and enterprise AI acceleration. The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects, building technologies, tools, and processes to enable secure software development and protect data and systems.
Requirements:
- 5+ years of experience in security compliance, audit management, or GRC
- Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
- Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines
- Strong project management skills with the ability to manage multiple concurrent audit cycles
- Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation
- Strong written and verbal communication skills
- Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors
- Detail-oriented mindset
