About the role
Recruitment Fraud Alert
We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.
What to know:
- Commvault does not conduct interviews by email or text.
- We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.
If you suspect a recruiting scam, please contact us at wwrecruitingteam@commvault.com
About Commvault
Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.
The Opportunity
Commvault is seeking a Compliance Analyst to join our Governance, Risk, and Compliance (GRC) team and play a key role in operating and scaling our global compliance program. Reporting to the Compliance Manager, this is an individual contributor role responsible for managing complex security and compliance frameworks, developing policies and training, supporting audits, and driving consistent, risk-based compliance practices across the organization.
What You'll Do...
- Manage and maintain compliance controls across multiple global security and regulatory frameworks, including ISO 27001, SOC 2, HIPAA, PCI DSS, and other applicable standards.
- Lead gap assessments and readiness activities for new or evolving compliance frameworks and regulatory requirements.
- Support and coordinate external audits and certifications, including evidence collection, auditor engagement, issue tracking, and remediation management.
- Support the development and management of policies and procedures.
- Assist in the coordination of company-wide training and awareness initiatives.
- Maintain high-quality compliance documentation, evidence repositories, and control artifacts to support audits and customer inquiries.
- Partner closely with Security, IT, Engineering, Legal, Privacy, and Operations teams to implement controls and drive remediation efforts.
Who You Are...
- 2-4 years of experience in compliance, GRC, security assurance, or a related discipline within a technology or SaaS environment.
- Hands-on experience operating compliance programs aligned to multiple frameworks (e.g., ISO 27001, SOC 2, HIPAA, PCI DSS).
- Strong understanding of control design, implementation, and testing, as well as compliance best practices.
- Experience supporting external audits and working directly with auditors, assessors, or certification bodies.
- Demonstrated ability to manage complex, overlapping priorities with strong attention to detail and sound judgment.
- Strong written and verbal communication skills, including the ability to engage effectively with internal stakeholders and external customers.
- Ability to operate independently as a senior individual contributor while collaborating effectively across teams.
- Experience with GRC tools, compliance management platforms, policy development, control testing, or vendor risk management is a plus.
- Trusted practitioner with a pragmatic, risk-based mindset.
- Comfortable operating with autonomy and accountability in a growing compliance program.
- Detail-oriented while able to connect controls to broader risk and business context.
- Collaborative, reliable, and respected by technical and non-technical partners.
- Professional and credible in audit and customer-facing interactions.
You'll Love Working Here Because...
- Continuous professional development and product training
- Clear career growth and advancement opportunities
- Inclusive company culture
- Comprehensive global benefits package
#LI-PK1
#LI-Remote
Thank you for your interest in Commvault. Reflected below is the minimum and maximum base salary range for this role. At Commvault we use broad salary ranges in our job postings to reflect the diverse levels of expertise and experience among our candidates and is not reflective of the total compensation and benefits package. The specific salary offered will be determined based on your unique qualifications, including your relevant experience, skills, and the value you bring to the role. While the range provides a general idea of the compensation, it is important to note that placements within the range are not automatic and will be carefully considered to ensure a fair and competitive offer. We are committed to rewarding talent and experience.
Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work.
Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email accommodations@commvault.com For any inquiries not related to an accommodation please reach out to wwrecruitingteam@commvault.com.
