Startups

Senior Commercial Compliance Analyst

Rubrik · Remote · Remote

← All jobs
About Rubrik

Backed by Greylock, Khosla and Lightspeed.

About the role

Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure. Found on 1752vc Careers, the job board for startup and VC roles.

What they're looking for

  • 5+ years of experience in security compliance, audit management, or GRC
  • Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
  • Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines
  • Strong project management skills with the ability to manage multiple concurrent audit cycles
  • Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation
  • Strong written and verbal communication skills
More about this role

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information.

Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure.

  • Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level...

Read the full posting on Rubrik's site ↗

Information Security

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.