Remote Cybersecurity Risk Management Lead

Rubrik; Helena (MT); Remote; USD 182,000 - 272,000; Full time

Benefits offered by this job

Bonus potential

Equity

Benefits

Job summary

Rubrik is seeking a Manager, CyberSecurity Risk Management to drive day‑to‑day execution of the cybersecurity risk program. You will coordinate risk assessments, track remediation, and produce leadership‑facing risk reporting in partnership with Security, Engineering, Product, IT, Legal, Procurement, and Finance.

You will influence and build consensus across levels, support risk governance, and help map activities to frameworks such as NIST, ISO, SOC 2, and PCI DSS.

Qualifications

• 8+ years in cybersecurity risk management or GRC, including 3+ years in a PM role.
• Experience scaling a cybersecurity risk management program in a fast-paced tech/SaaS/cloud company.
• Strong program management skills: planning, dependency management, reporting, cross-functional delivery.
• Knowledge of NIST RMF/800-37/800-30, ISO 27005, COBIT, and security frameworks (ISO27001/2, SOC 2, FedRAMP, NIST CSF/800-53, CIS, PCI DSS, HIPAA).

Responsibilities

• Coordinate cross-functional risk assessments and remediation tracking.
• Draft risk statements translating findings into business impact with rationale.
• Maintain risk register with ownership, status, dates, and treatment decisions.
• Prepare materials for risk committee meetings and leadership reporting.
• Collect metrics (KPIs/KRIs), build dashboards, and update leadership.
• Support enterprise, technical, and third‑party risk assessments at scale.

Skills

Program management

Risk management

Communication

Agile/project management

Stakeholder management

Education

Bachelor's degree in Security, Computer Science, MIS, or related field

Tools

Jira

Confluence

Tableau

Job description

Rubrik is seeking a Manager, CyberSecurity Risk Management to drive day‑to‑day execution of the cybersecurity risk program. You will coordinate risk assessments, track remediation, and produce leadership‑facing risk reporting in partnership with Security, Engineering, Product, IT, Legal, Procurement, and Finance.

You will influence and build consensus across levels, support risk governance, and help map activities to frameworks such as NIST, ISO, SOC 2, and PCI DSS.