Cybersecurity Risk Management Lead – Remote

Rubrik; Pierre (SD); À distance; USD 182 000 - 272 000; Plein temps

Résumé du poste

Rubrik is seeking a Manager of CyberSecurity Risk Management to lead the risk program and partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to deliver measurable risk reductions.

You will coordinate cross-functional risk assessments, maintain the risk register, and produce leadership dashboards while ensuring alignment with frameworks such as NIST, ISO, SOC 2, and HIPAA. This role emphasizes governance, scalability, and impactful risk decisions.

Qualifications

• 8+ years in cybersecurity risk management or GRC.
• Experience scaling risk programs in SaaS/cloud environments.
• Ability to communicate risk to senior leadership.
• Strong knowledge of NIST/ISO/COBIT frameworks.

Responsabilités

• Coordinate cross-functional risk assessments and risk remediation.
• Maintain risk register with ownership, status, dates and actions.
• Draft risk statements translating findings into business impact.
• Prepare materials for risk committee meetings and reviews.
• Collect and analyze KPIs/KRIs for leadership updates.
• Support enterprise, technical and third-party risk assessments.
• Document inherently residual risk assessments for systems and apps.
• Map activities to ISO 27001, SOC 2, FedRAMP, NIST, PCI DSS, HIPAA.
• Drive improvement through governance, automation and AI-enabled tooling.
• Influence without direct authority and build consensus.

Connaissances

Risk management

Program management

Stakeholder communication

Agile PM tools

Formation

Bachelor's degree in Security, CS, MIS

Outils

Jira

Confluence

Tableau

Description du poste

Rubrik is seeking a Manager of CyberSecurity Risk Management to lead the risk program and partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to deliver measurable risk reductions.

You will coordinate cross-functional risk assessments, maintain the risk register, and produce leadership dashboards while ensuring alignment with frameworks such as NIST, ISO, SOC 2, and HIPAA. This role emphasizes governance, scalability, and impactful risk decisions.