Job Opportunities API

Recruitment Fraud Alert We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.   What to know: Commvault does  not  conduct interviews by email or text. We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day. If you suspect a recruiting scam, please contact us at [email protected]     About Commvault   Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.  The Opportunity Commvault is seeking a Compliance Analyst to join our Governance, Risk, and Compliance (GRC) team and play a key role in operating and scaling our global compliance program. Reporting to the Compliance Manager, this is an individual contributor role responsible for managing complex security and compliance frameworks, developing policies and training, supporting audits, and driving consistent, risk-based compliance practices across the organization. What You'll Do... Manage and maintain compliance controls across multiple global security and regulatory frameworks, including ISO 27001, SOC 2, HIPAA, PCI DSS, and other applicable standards. Lead gap assessments and readiness activities for new or evolving compliance frameworks and regulatory requirements. Support and coordinate external audits and certifications, including evidence collection, auditor engagement, issue tracking, and remediation management. Support the development and management of policies and procedures. Assist in the coordination of company-wide training and awareness initiatives. Maintain high-quality compliance documentation, evidence repositories, and control artifacts to support audits and customer inquiries. Partner closely with Security, IT, Engineering, Legal, Privacy, and Operations teams to implement controls and drive remediation efforts. Who You Are... 2-4 years of experience in compliance, GRC, security assurance, or a related discipline within a technology or SaaS environment. Hands-on experience operating compliance programs aligned to multiple frameworks (e.g., ISO 27001, SOC 2, HIPAA, PCI DSS). Strong understanding of control design, implementation, and testing, as well as compliance best practices. Experience supporting external audits and working directly with auditors, assessors, or certification bodies. Demonstrated ability to manage complex, overlapping priorities with strong attention to detail and sound judgment. Strong written and verbal communication skills, including the ability to engage effectively with internal stakeholders and external customers. Ability to operate independently as a senior individual contributor while collaborating effectively across teams. Experience with GRC tools, compliance management platforms, policy development, control testing, or vendor risk management is a plus. Trusted practitioner with a pragmatic, risk-based mindset. Comfortable operating with autonomy and accountability in a growing compliance program. Detail-oriented while able to connect controls to broader risk and business context. Collaborative, reliable, and respected by technical and non-technical partners. Professional and credible in audit and customer-facing interactions. You