Senior Security Assurance Analyst

About Rippling

Rippling gives businesses one place to run HR, IT, and Finance. It brings together all of the workforce systems that are normally scattered across a company, like payroll, expenses, benefits, and computers. For the first time ever, you can manage and automate every part of the employee lifecycle in a single system.

Take onboarding, for example. With Rippling, you can hire a new employee anywhere in the world and set up their payroll, corporate card, computer, benefits, and even third-party apps like Slack and Microsoft 365—all within 90 seconds.

Based in San Francisco, CA, Rippling has raised $1.4B+ from the world’s top investors—including Kleiner Perkins, Founders Fund, Sequoia, Greenoaks, and Bedrock—and was named one of America's best startup employers by Forbes.

We prioritize candidate safety. Please be aware that all official communication will only be sent from  addresses.

Rippling gives businesses one place to run HR, IT, and Finance. It brings together all of the workforce systems that are normally scattered across a company, like payroll, expenses, benefits, and computers. For the first time ever, you can manage and automate every part of the employee lifecycle in a single system.

Take onboarding, for example. With Rippling, you can hire a new employee anywhere in the world and set up their payroll, corporate card, computer, benefits, and even third-party apps like Slack and Microsoft 365—all within 90 seconds.

Based in San Francisco, CA, Rippling has raised $1.4B+ from the world’s top investors—including Kleiner Perkins, Founders Fund, Sequoia, Greenoaks, and Bedrock—and was named one of America's best startup employers by Forbes.

We prioritize candidate safety. Please be aware that all official communication will only be sent from  addresses.

Join Rippling's Security Assurance team and help demonstrate the trust our customers place in us every day. You'll play a key role in delivering internationally recognized security certifications and attestations, supporting regulatory obligations, and partnering across the business to strengthen our security assurance program.

At Ripping, we are on an exciting growth journey, and our Security team is at the forefront of this transformation. We are committed to our mission of protecting our company's assets and data, and we need individuals who share this passion.

The Security Assurance team is responsible for delivering Rippling's security assurance programmes and supporting compliance with technology and security regulatory requirements. Through internationally recognised certifications, attestations, and effective governance, the team helps maintain a strong security posture, meet regulatory obligations, and build customer trust.

A self-motivated, experienced professional who thrives with autonomy, takes ownership of their work, and executes with minimal oversight. A collaborative team player and strong communicator, capable of building relationships and driving outcomes across technical and business teams.

• Support the delivery of Rippling's security assurance program across ISO 27001, SOC 2, ISO/IEC 42001, ISO/IEC 27018 and CSA STAR. The successful candidate will have experience supporting these certifications and attestation, coordinating evidence collection across the business, liaising with internal stakeholders and auditors, and helping ensure all annual certification and attestation activities are completed efficiently and on schedule.
• Vendor Management (Security Assurance):
  Perform security due diligence on new and existing vendors, evaluating the data they process, where it is stored, how it is used, their security and privacy controls, independent certifications (e.g. SOC and ISO), and external security ratings (Bit Sight) to support informed third-party risk and onboarding decisions.
• Support the evolution of the ISMS by enhancing security policies and standards, maturing the policy lifecycle, and improving governance and review processes across the organization.
• Support internal teams and external stakeholders with ad hoc security assurance requests,…