Senior Commercial Compliance Analyst

The role

You will lead Commercial Audit and Certification Management by owning the security certification portfolio and coordinated audits. You will manage the end-to-end lifecycle from evidence collection to auditor management and remediation tracking.

What you will do

• Own the audit and certification calendar across active portfolio
• Serve as primary point of contact for external auditors and certification bodies
• Maintain mapping between compliance controls and evidence sources
• Drive coordinated audit strategy to reduce duplicate work
• Lead evaluation and scoping of emerging and planned certifications
• Manage the lifecycle of certifications including retirements and transitions
• Track and report audit status, findings, and remediation progress to leadership
• Partner with control owners across InfoSec, IT, Legal, and Engineering
• Collaborate with Risk Management to feed findings into the risk register
• Support Customer Trust Enablement by providing audit and certification outputs

Required qualifications

• 5+ years of experience in security compliance, audit management, or GRC
• Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
• Experience working directly with external auditors and certification bodies
• Strong project management skills
• Familiarity with GRC tooling and ticketing systems such as Jira
• Strong written and verbal communication skills
• Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors
• Detailed oriented

Benefits

• Bonus potential
• Equity
• Benefits

About the company

Rubrik is the Security and AI Operations Company delivering one platform built at the intersection of data, identity, and AI. The Information Security organization builds technologies, tools, and processes to enable secure software development and data protection.