Compliance Analyst

Commvault•United States, NJ

7h•$54,400 - $120,750•Remote

About The Position

Commvault is seeking a Compliance Analyst to join our Governance, Risk, and Compliance (GRC) team and play a key role in operating and scaling our global compliance program. Reporting to the Compliance Manager, this is an individual contributor role responsible for managing complex security and compliance frameworks, developing policies and training, supporting audits, and driving consistent, risk-based compliance practices across the organization.

Requirements

2-4 years of experience in compliance, GRC, security assurance, or a related discipline within a technology or SaaS environment.
Hands-on experience operating compliance programs aligned to multiple frameworks (e.g., ISO 27001, SOC 2, HIPAA, PCI DSS).
Strong understanding of control design, implementation, and testing, as well as compliance best practices.
Experience supporting external audits and working directly with auditors, assessors, or certification bodies.
Demonstrated ability to manage complex, overlapping priorities with strong attention to detail and sound judgment.
Strong written and verbal communication skills, including the ability to engage effectively with internal stakeholders and external customers.
Ability to operate independently as a senior individual contributor while collaborating effectively across teams.
Trusted practitioner with a pragmatic, risk-based mindset.
Comfortable operating with autonomy and accountability in a growing compliance program.
Detail-oriented while able to connect controls to broader risk and business context.
Collaborative, reliable, and respected by technical and non-technical partners.
Professional and credible in audit and customer-facing interactions.

Nice To Haves

Experience with GRC tools, compliance management platforms, policy development, control testing, or vendor risk management is a plus.

Responsibilities

Manage and maintain compliance controls across multiple global security and regulatory frameworks, including ISO 27001, SOC 2, HIPAA, PCI DSS, and other applicable standards.
Lead gap assessments and readiness activities for new or evolving compliance frameworks and regulatory requirements.
Support and coordinate external audits and certifications, including evidence collection, auditor engagement, issue tracking, and remediation management.
Support the development and management of policies and procedures.
Assist in the coordination of company-wide training and awareness initiatives.
Maintain high-quality compliance documentation, evidence repositories, and control artifacts to support audits and customer inquiries.
Partner closely with Security, IT, Engineering, Legal, Privacy, and Operations teams to implement controls and drive remediation efforts.