[Remote] Compliance Analyst
Note: The job is a remote job and is open to candidates in USA. Commvault is a leader in cyber resilience, empowering customers to recover from cyberattacks. The Compliance Analyst will play a key role in managing compliance frameworks, developing policies, and supporting audits to ensure consistent compliance practices across the organization.
Responsibilities
- Manage and maintain compliance controls across multiple global security and regulatory frameworks, including ISO 27001, SOC 2, HIPAA, PCI DSS, and other applicable standards
- Lead gap assessments and readiness activities for new or evolving compliance frameworks and regulatory requirements
- Support and coordinate external audits and certifications, including evidence collection, auditor engagement, issue tracking, and remediation management
- Support the development and management of policies and procedures
- Assist in the coordination of company-wide training and awareness initiatives
- Maintain high-quality compliance documentation, evidence repositories, and control artifacts to support audits and customer inquiries
- Partner closely with Security, IT, Engineering, Legal, Privacy, and Operations teams to implement controls and drive remediation efforts
Skills
- 2-4 years of experience in compliance, GRC, security assurance, or a related discipline within a technology or SaaS environment
- Hands-on experience operating compliance programs aligned to multiple frameworks (e.g., ISO 27001, SOC 2, HIPAA, PCI DSS)
- Strong understanding of control design, implementation, and testing, as well as compliance best practices
- Experience supporting external audits and working directly with auditors, assessors, or certification bodies
- Demonstrated ability to manage complex, overlapping priorities with strong attention to detail and sound judgment
- Strong written and verbal communication skills, including the ability to engage effectively with internal stakeholders and external customers
- Ability to operate independently as a senior individual contributor while collaborating effectively across teams
- Trusted practitioner with a pragmatic, risk-based mindset
- Comfortable operating with autonomy and accountability in a growing compliance program
- Detail-oriented while able to connect controls to broader risk and business context
- Collaborative, reliable, and respected by technical and non-technical partners
- Professional and credible in audit and customer-facing interactions
- Experience with GRC tools, compliance management platforms, policy development, control testing, or vendor risk management is a plus
Benefits
- Continuous professional development and product training
- Clear career growth and advancement opportunities
- Inclusive company culture
- Comprehensive global benefits package
Company Overview
Company H1B Sponsorship