Remote Cybersecurity Risk Management Lead

Rubrik; Annapolis (MD); Remote; USD 163,000 - 272,000; Full time

Job summary

Rubrik seeks a Manager, CyberSecurity Risk Management to lead and coordinate Rubrik's risk program across Security, Engineering, Product, IT, Legal, and Finance. You will drive risk assessments, governance, and remediation with a strong program-management discipline.

The role requires deep risk and compliance knowledge, stakeholder influence, and experience with agile tools like Jira/Confluence/Tableau. Location across key U.S. offices is supported.

Qualifications

• 8+ years of cybersecurity risk management or GRC experience.
• 3+ years in a program or project management role.
• Experience scaling risk management in SaaS/cloud companies.
• Strong knowledge of risk methodologies (NIST RMF / 800-37 / 800-30, ISO 27005, COBIT).
• Technical understanding of cloud, identity, network, and application security.
• Able to communicate risk clearly to senior stakeholders and build consensus.
• Bachelor's degree in Security, Computer Science, MIS, or related field.

Responsibilities

• Support program operations for the Cybersecurity Risk Management Program.
• Conduct risk assessments and triage security issues across Rubrik products and infrastructure.
• Draft risk statements translating findings into business impact with rationale.
• Maintain the risk register with ownership, status, and target dates.
• Coordinate cross-functional risk initiatives and track milestones.
• Drive remediation of risks to closure with risk owners and leadership reporting.
• Support risk governance cadence and risk committee materials.

Skills

Risk management

Program management

NIST RMF

ISO 27001

SOC 2

Cloud security

Jira

Confluence

Tableau

Stakeholder mgmt

Communication

Education

Bachelor's degree

Tools

Jira

Confluence

Tableau

Job description

Rubrik seeks a Manager, CyberSecurity Risk Management to lead and coordinate Rubrik's risk program across Security, Engineering, Product, IT, Legal, and Finance. You will drive risk assessments, governance, and remediation with a strong program-management discipline.

The role requires deep risk and compliance knowledge, stakeholder influence, and experience with agile tools like Jira/Confluence/Tableau. Location across key U.S. offices is supported.