Compliance Analyst

About the role

The Compliance Analyst will manage and maintain compliance controls across multiple global security and regulatory frameworks, lead gap assessments and readiness activities, support and coordinate external audits and certifications, develop and manage policies and procedures, assist in training and awareness initiatives, maintain compliance documentation, and partner with various teams to implement controls and drive remediation efforts.

Responsibilities

• Manage and maintain compliance controls across multiple global security and regulatory frameworks, including ISO 27001, SOC 2, HIPAA, PCI DSS, and other applicable standards.
• Lead gap assessments and readiness activities for new or evolving compliance frameworks and regulatory requirements.
• Support and coordinate external audits and certifications, including evidence collection, auditor engagement, issue tracking, and remediation management.
• Support the development and management of policies and procedures.
• Aid in the coordination of company-wide training and awareness initiatives.
• Maintain high-quality compliance documentation, evidence repositories, and control artifacts to support audits and customer inquiries.
• Partner closely with Security, IT, Engineering, Legal, Privacy, and Operations teams to implement controls and drive remediation efforts.

Requirements

• 2-4 years of experience in compliance, GRC, security assurance, or a related discipline within a technology or SaaS environment.
• Hands-on experience operating compliance programs aligned to multiple frameworks (e.g., ISO 27001, SOC 2, HIPAA, PCI DSS).
• Strong understanding of control design, implementation, and testing, as well as compliance best practices.
• Experience supporting external audits and working directly with auditors, assessors, or certification bodies.
• Demonstrated ability to manage complex, overlapping priorities with strong attention to detail and sound judgment.
• Strong written and verbal communication skills, including the ability to engage effectively with internal stakeholders and external customers.
• Ability to operate independently as a senior individual contributor while collaborating effectively across teams.
• Experience with GRC tools, compliance management platforms, policy development, control testing, or vendor risk management is a plus.
• Trusted practitioner with a pragmatic, risk-based mindset.
• Comfortable operating with autonomy and accountability in a growing compliance program.
• Detail-oriented while able to connect controls to broader risk and business context.
• Collaborative, reliable, and respected by technical and non-technical partners.
• Professional and credible in audit and customer-facing interactions.

Qualifications

• Education: Bachelor's degree in Computer Science, Information Systems, Business Administration, or a related field.
• License/Certification: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or equivalent certification preferred.

Skills

• Excellent analytical and problem-solving skills.
• Strong project management and organizational skills.
• Experience with compliance management software and tools.
• Knowledge of industry-specific regulations and standards.
• Effective communication and interpersonal skills.
• Ability to work independently and collaboratively.

Benefits

At Commvault, we offer a comprehensive global benefits package, continuous professional development and product training, clear career growth and advancement opportunities, and an inclusive company culture.

Pay

The specific salary offered will be determined based on your unique qualifications, including your relevant experience, skills, and the value you bring to the role. The pay range for this role is $54,400 - $120,750 USD.

Schedule

This is a full-time position.

Contact

If you have any questions about this role or the application process, please email wwrecruitingteam@commvault.com.

Equal Opportunity Employer

We are an equal opportunity employer and committed to providing a workplace free from discrimination and harassment. We celebrate diversity and welcome applicants of all backgrounds.