Rubrik: Senior Commercial Compliance Analyst — Remote

About Rubrik

Rubrik provides data-security and resilience technology for organisations facing cyberattacks, malicious activity and operational disruption. Its recruitment material discusses protecting enterprise information, including data held in business software and cloud environments. The described portfolio includes security and protection for SaaS applications, with attention to access, backup and recovery. Its business connects the technical handling of information with an organisation's ability to keep critical data protected and to recover when normal operations are disrupted.

The position and its setting

Rubrik lists Senior Commercial Compliance Analyst in Remote, under reference 8274666. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.

• Department: Information Security
• Employer listing date: 12 October 2026

Responsibilities and work described

• Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management
• Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure
• Maintenance: the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble
• Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners
• Leadership: evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion
• Management: the lifecycle of certifications end-to-end, including retirements and transitions
• Tracking: and report audit status, findings, and remediation progress to leadership, using the team's Jira-based tracking dashboards
• Partner with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule
• Collaboration: with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle (RMLC)
• Support: Customer Trust Enablement by ensuring audit and certification outputs are readily usable to answer customer security inquiries
• Leverage AI and automation to streamline evidence gathering, control testing, and audit workflows

Essential requirements and candidate background

• 5+ years of experience in security compliance, audit management, or GRC
• Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework
• Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines
• Project management skills with the ability to manage multiple concurrent audit cycles
• Familiarity: GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation
• Written and verbal communication skills
• Knowledge: regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors
• Detailed oriented
• #LI-Remote
• The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits
• The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location
• Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training
• US (SF Bay Area, DC Metro, NYC, Seattle) Pay Range
• $150,200 — $225,400 USD
• US2 (all other US offices/remote) Pay Range
• $135,200 — $202,800 USD

Location, schedule and contract conditions

For this overseas or regional listing, confirm work authorisation and any location restrictions with the employer. The location does not establish visa sponsorship or permission to work remotely from India.

• Work arrangement: Remote
• Advertised location: Remote

Conditions requiring the complete notice

Some passages contain complex or combined conditions that have not been reduced to short eligibility statements here. Read the complete linked notice for those passages, including any alternatives, exceptions or restrictions. The concise facts above should not be treated as the full wording of every condition.

Pay and application dates

A verified salary figure is not established in this article. An online estimate for another Senior Commercial Compliance Analyst vacancy is not an offer for reference 8274666; use the employer’s own pay disclosure and recruitment communication.

A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.

How to apply to Rubrik

Applications follow the official employer page linked below.

Open the official Rubrik posting below and match the title and reference 8274666.

Compare your qualifications and experience with the essential conditions for the Remote position, then read the preferred criteria separately.

Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.

Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.

Practical preparation: AI

An AI-related example should make the task and evaluation explicit. Explain the inputs, the system’s intended output and how you checked errors, usefulness or reliability, rather than relying on the model name alone.

Relevant skills

• AI/ML
• ISO
• AI
• audit
• risk management
• compliance
• training
• project management
• communication
• commercial negotiations