Remote Cybersecurity Risk Management Lead

Rubrik; Bismarck (ND); Remote; USD 163,000 - 272,000; Full time

Job summary

Rubrik seeks a Manager, CyberSecurity Risk Management to lead day-to-day execution of the cybersecurity risk program, coordinating cross-functional risk assessments and remediation efforts. You will produce risk reporting for leadership and partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to drive measurable risk reductions.

The role requires strong program management, deep risk and compliance knowledge, and the ability to influence at all levels without direct

Qualifications

• 8+ years of experience in cybersecurity risk management or GRC.
• Experience scaling a cybersecurity risk management program in a fast-paced tech/SaaS/cloud environment.
• Strong program management skills: planning, dependency management, effort estimation, status reporting, and cross-functional delivery.
• Solid knowledge of risk frameworks (NIST RMF 800-37/800-30, ISO 27005, COBIT) and ISO 27001/2, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA.
• Technical understanding of cloud, identity, network, and application security to engage credibly with engineering teams.
• Able to communicate risk clearly to senior stakeholders and build consensus without direct authority.
• Hands-on experience with agile project management and tools (Jira, Confluence, Tableau).
• Bachelor's degree in Security, CS, MIS, or related field, or equivalent practical experience.

Responsibilities

• Support program operations for the overall Cybersecurity Risk Management Program.
• Coordinate risk assessments and triage security issues related to Rubrik’s core products and services.
• Draft clear risk statements translating findings into business impact.
• Maintain and update the risk register with ownership, status, and targets.
• Track cross-functional risk initiatives, timelines, and actions; flag delivery risks.
• Drive remediation of risks to closure with risk owners, update risk register, escalate blockers, and report status to leadership.
• Support risk governance cadence, including materials for risk committee meetings and tracking actions to completion.
• Collect and analyze KPIs/KRIs, build dashboards, and prepare risk updates for leadership.
• Scale risk assessments across enterprise, technical, and third-party risk programs.
• Execute and document inherent and residual risk assessments for systems and cloud services; gather evidence and validate controls.
• Map activities to compliance obligations (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and emerging regulations.
• Contribute to risk quantification efforts to prioritize risks financially.
• Support GRC tooling, automation, and AI-enabled improvements; pilot new workflows and drive adoption.

Skills

Cybersecurity risk management

Program management

Risk governance

Stakeholder management

Communication

Education

Bachelor's degree in Security, CS, MIS, or related field

Tools

Jira

Confluence

Tableau

Job description

Rubrik seeks a Manager, CyberSecurity Risk Management to lead day-to-day execution of the cybersecurity risk program, coordinating cross-functional risk assessments and remediation efforts. You will produce risk reporting for leadership and partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to drive measurable risk reductions.

The role requires strong program management, deep risk and compliance knowledge, and the ability to influence at all levels without direct