Remote Cybersecurity Risk Management Lead

Rubrik; Frankfort (KY); Remote; USD 163,000 - 272,000; Full time

Job summary

Rubrik seeks a Manager of CyberSecurity Risk Management to lead and coordinate Rubrik's cybersecurity risk program. You will partner across Security, Engineering, Product, IT, Legal, Procurement and Finance to drive risk assessments, remediation tracking, and leadership reporting, delivering measurable risk posture improvements.

The role requires strong program management discipline, risk knowledge, and the ability to influence at all levels without direct authority.

Qualifications

• 8+ years of experience in cybersecurity risk management or GRC.
• Experience scaling a cybersecurity risk management program in a fast-paced tech/SaaS/cloud company.
• Strong program management: planning, dependencies, estimation, status reporting, cross-functional delivery.
• Knowledge of risk management methodologies (NIST RMF/800-37/800-30, ISO 27005, COBIT) and common frameworks (ISO 27001/2, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA).
• Technical understanding of cloud, identity, network, and app security.

Responsibilities

• Support and operate the Cybersecurity Risk Management Program.
• Conduct and triage risk assessments for Rubrik's products and infrastructure.
• Draft risk statements translating findings into business impact.
• Maintain the risk register with owners, status, dates, and treatments.
• Coordinate cross-functional risk initiatives and track milestones.

Skills

Cybersecurity risk management

Program management

Risk assessment

Stakeholder communication

Agile project management

Education

Bachelor's degree in Security/CS/MIS or related field

Equivalent practical experience

Tools

Jira

Confluence

Tableau

GRC tooling

Job description

Rubrik seeks a Manager of CyberSecurity Risk Management to lead and coordinate Rubrik's cybersecurity risk program. You will partner across Security, Engineering, Product, IT, Legal, Procurement and Finance to drive risk assessments, remediation tracking, and leadership reporting, delivering measurable risk posture improvements.

The role requires strong program management discipline, risk knowledge, and the ability to influence at all levels without direct authority.