Remote Cybersecurity Risk Management Lead

Rubrik; Hagåtña (GU); Remote; USD 182,000 - 272,000; Full time

Job summary

Rubrik is seeking a Manager, CyberSecurity Risk Management to lead and coordinate Rubrik's cybersecurity risk program. You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to drive risk assessments, remediation, and reporting for leadership reviews.

You will translate complex security findings into business impact, maintain risk registers, develop metrics, and support governance processes, with a strong emphasis on collaboration and measurable outcomes.

Qualifications

• 8+ years of cybersecurity risk management or GRC experience, including at least 3 years in program management.
• Experience scaling a cybersecurity risk program in a fast-paced SaaS, cloud, or tech company.
• Strong program management skills: planning, dependencies, effort estimation, reporting, cross-functional delivery.
• Solid knowledge of risk methodologies and frameworks (NIST RMF/800-37/800-30, ISO 27005, COBIT) and ISO 27001/2, SOC 2, FedRAMP, NIST CSF/800-53, CIS, PCI DSS, HIPAA.
• Technical understanding of cloud, identity, network, and app security to engage with engineering teams.
• Ability to clearly communicate risk to senior stakeholders and build consensus without direct authority.
• Hands-on experience with Jira, Confluence, Tableau and agile tools; strong written/verbal communication and stakeholder management.

Responsibilities

• Support program operations for the Cybersecurity Risk Management Program.
• Coordinate risk assessments and triage security issues related to Rubrik’s products, services, and infrastructure.
• Draft risk statements translating findings into business impact with likelihood and key assumptions.
• Maintain the risk register with ownership, status, target dates, and risk treatment decisions.
• Coordinate cross-functional risk initiatives, manage timelines and dependencies, and escalate delivery risks.
• Drive remediation to closure by coordinating with risk owners and tracking milestones.
• Support risk governance, including risk committee materials and escalation tracking.
• Collect and analyze KPIs/KRIs, build dashboards, and prepare leadership risk updates.
• Scale the risk assessment program across enterprise, technical, and third-party risk.
• Execute and document cybersecurity risk assessments for systems and cloud services; gather evidence and validate controls.
• Map activities to frameworks (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and evolving regulations.
• Contribute to risk quantification to prioritize in business terms.
• Support GRC tooling, automation, and AI-enabled improvements; pilot use cases and drive adoption.
• Identify gaps and propose process improvements for efficiency and consistency.

Skills

Cybersecurity risk management

Program management

Risk assessments

Stakeholder communication

Agile project management

Education

Bachelor's degree in Security, Computer Science, MIS, or related field

Tools

Jira

Confluence

Tableau

Job description

Rubrik is seeking a Manager, CyberSecurity Risk Management to lead and coordinate Rubrik's cybersecurity risk program. You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to drive risk assessments, remediation, and reporting for leadership reviews.

You will translate complex security findings into business impact, maintain risk registers, develop metrics, and support governance processes, with a strong emphasis on collaboration and measurable outcomes.