Senior Security Assurance Analyst

Senior Security Assurance Analyst

Rippling Seattle, Washington, United States

Rippling gives businesses one place to run HR, IT, and Finance. It brings together all of the workforce systems that are normally scattered across a company—payroll, expenses, benefits, and computers—so you can manage and automate every part of the employee lifecycle in a single system. The company is based in San Francisco, CA and has raised over $1.4 B from top investors such as Kleiner Perkins, Founders Fund, Sequoia, Greenoaks, and Bedrock, and was named one of America’s best startup employers by Forbes.

Join Rippling’s Security Assurance team to help demonstrate the trust our customers place in us every day. You will play a key role in delivering internationally recognized security certifications and attestations, supporting regulatory obligations, and partnering across the business to strengthen our security assurance program.

The Security Assurance team delivers Rippling’s security assurance programs and supports compliance with technology and security regulatory requirements. Through internationally recognized certifications, attestations, and governance, the team maintains a strong security posture, meets regulatory obligations, and builds customer trust.

• Support the delivery of Rippling’s security assurance program across ISO 27001, SOC 2, ISO/IEC 42001, ISO/IEC 27018, and CSA STAR. Coordinate evidence collection, liaise with internal stakeholders and auditors, and ensure all annual certification and attestation activities are completed efficiently and on schedule.
• Perform security due diligence on new and existing vendors, evaluating data processing, storage, usage, security and privacy controls, independent certifications (e.g., SOC and ISO), and external security ratings (Bit Sight) to support informed third‑party risk and onboarding decisions.
• Support the evolution of the ISMS by enhancing security policies and standards, maturing the policy lifecycle, and improving governance and review processes across the organization.
• Support internal teams and external stakeholders with ad hoc security assurance requests, including audit evidence, customer due diligence, policy guidance, and broader security governance activities.

• 5+ years of experience in security compliance roles with exceptional communication skills, able to engage internal teams (engineering, privacy/legal, product, etc.) and external stakeholders.
• In‑depth familiarity with information security standards such as ISO 27001 and SOC 2.
• Proficiency in cloud security best practices, ensuring cloud infrastructure remains secure and compliant.
• Experience developing, reviewing, and maintaining information security policies.
• Good understanding of privacy regulations and data handling obligations, and ability to work effectively alongside legal and privacy teams.

• Information security awareness training materials.
• Experience creating meaningful security metrics.
• Working knowledge or experience of user access management.
• Experience automating security controls.

Rippling is an equal‑opportunity employer. We are committed to building a diverse and inclusive workforce and do not discriminate based on race, religion, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, veteran or military status, or any other legally protected characteristics. We provide reasonable accommodations for candidates with disabilities who need assistance during the hiring process—please email  to request an accommodation.

Rippling values employees working in‑office to foster a collaborative work environment and company culture. For office‑based employees who live within a defined radius of a Rippling office, working in the office, at least three days a week, is considered an essential function of the role.

Salary: US Tier 1 – 132,000 – 220,000 USD per year; US Tier 2 – 118,800 – 198,000 USD per year.