# Senior Commercial Compliance Analyst at Rubrik > Remote · United States · Senior · Other · open. Source: https://alderhq.app/jobs/greenhouse%3Arubrik%3A8274666 (read 2026-11-14). ## Facts (observed) - Company: [Rubrik](https://alderhq.app/companies/rubrik) - Location text: Remote; United States - Remote - Where it can be done from (inferred): Remote · United States (evidence: "Location: Remote; United States - Remote") - Posted: 2026-10-12 (33 days ago) - First seen by alder: 2026-11-02 · last verified: 2026-11-12 - Reposted: 0 times · edited: 1 times - Apply on the employer's site: https://www.rubrik.com/company/careers/departments/job.8274666?gh_jid=8274666 ## Pay and sponsorship - Posted pay: $135k–$203k per year (from the listing's pay field) - Market band for similar posted roles (United States, n 4275): p25 $103k, median $132k, p75 $170k - H-1B filings at this company for similar roles, FY26: 15, median offered wage $185k ([US DOL OFLC LCA disclosure data](https://www.dol.gov/agencies/eta/foreign-labor/performance)) - Recognised sponsor (NL): registered as "Rubrik The Netherlands B.V." (checked 2026-11-09, [register](https://ind.nl/en/public-register-recognised-sponsors/public-register-regular-labour-and-highly-skilled-migrants)) - Licensed UK sponsor: registered as "Rubrik UK Limited" (checked 2026-11-09, [register](https://www.gov.uk/government/publications/register-of-licensed-sponsors-workers)) ## Description (the employer's text) ### About the team The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. ### About the role Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure. ### What you'll do - Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA. - Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure. - Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble. - Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners. - Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion. - Manage the lifecycle of certifications end-to-end, including retirements and transitions - Track and report audit status, findings, and remediation progress to leadership, using the team's Jira-based tracking dashboards. - Partner with control owners across InfoSec, IT, Legal, and Engineering to gather evidence and close audit findings on schedule. - Collaborate with Risk Management to ensure audit findings feed into the broader risk register and remediation lifecycle (RMLC). - Support Customer Trust Enablement by ensuring audit and certification outputs are readily usable to answer customer security inquiries. - Leverage AI and automation to streamline evidence gathering, control testing, and audit workflows. ### Experience you'll need - 5+ years of experience in security compliance, audit management, or GRC - Hands-on experience managing SOC 2, ISO 27001, ISO 42001 audits, plus at least one additional framework - Experience working directly with external auditors and certification bodies, including scoping and negotiating audit timelines. - Strong project management skills with the ability to manage multiple concurrent audit cycles. - Familiarity with GRC tooling and ticketing systems (e.g., Jira) for tracking evidence and remediation. - Strong written and verbal communication skills - Knowledge of regulatory and contractual compliance requirements relevant to enterprise SaaS/security vendors. - Detailed oriented #LI-Remote The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training. US (SF Bay Area, DC Metro, NYC, Seattle) Pay Range $150,200—$225,400 USD The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training. --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Arubrik%3A8274666 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.