Description

You will lead Rubrik’s commercial compliance program, managing the Common Control Framework, control lifecycle, and supporting customer audits to strengthen security posture. You'll collaborate with cross-functional teams and drive certification maintenance and improvements.

Requirements

• 8+ years in GRC, security/commercial compliance, or audit in SaaS/cloud environment.
• 2+ years people management of distributed/global teams.
• Experience managing a control framework and continuous compliance monitoring.
• Hands-on external audit support for SOC, ISO, customer assessments.
• Knowledge of frameworks: SOC 2, ISO 27001, NIST, CIS, SIG, CSA CCM.

Responsibilities

• Lead continuous compliance monitoring, control health reporting, and executive updates.
• Own and evolve the Common Control Framework (CCF), including control mapping to standards.
• Manage control lifecycle: design, implementation, testing, evidence collection, remediation.
• Coordinate customer audits, security questionnaires, and compliance inquiries.
• Drive program execution to maintain SOC 2, ISO 27001 certifications.