Senior Commercial Compliance Analyst

Responsibilities

• Own the audit and certification calendar across SOC 1, SOC 2, ISO 27001, ISO 42001, CSA STAR, TISAX, HITRUST and HIPAA
• Serve as primary contact for external auditors and certification bodies through findings closure
• Maintain mapping between compliance controls and evidence sources for continuous audit readiness
• Drive coordinated audit strategy to reduce duplicate evidence requests across frameworks
• Lead scoping of emerging certifications supporting international and AI governance expansion
• Track and report audit status and remediation progress to leadership
• Partner with InfoSec, IT, Legal and Engineering control owners on evidence and findings
• Feed audit findings into the risk register and remediation lifecycle with Risk Management
• Use AI and automation to streamline evidence gathering and control testing

Requirements

• 5+ years in security compliance, audit management or GRC
• Hands-on SOC 2, ISO 27001 and ISO 42001 audit management plus one additional framework
• Experience working directly with external auditors and certification bodies
• Strong project management across multiple concurrent audit cycles
• Familiarity with GRC tooling and ticketing systems such as Jira
• Knowledge of regulatory and contractual compliance for enterprise SaaS vendors
• Strong written and verbal communication, detail oriented

About the Company

• Rubrik is the Security and AI Operations Company, focused on data protection, cyber resilience and enterprise AI.