Senior Cybersecurity Risk Program Manager

Rubrik; Olympia (WA); Remote; USD 182,000 - 272,000; Full time

Job summary

Rubrik is seeking a Manager, CyberSecurity Risk Management to drive day-to-day operations of Rubrik's risk program. You will coordinate cross-functional risk assessments, track remediation, and produce leadership-facing risk reports, partnering with Security, Engineering, Product, IT, Legal, Procurement, and Finance.

Strong PM discipline and risk/compliance knowledge are essential. You will map activities to frameworks (ISO 27001, SOC 2, NIST CSF, PCI DSS, HIPAA) and drive KPI/KRI reporting.

Qualifications

• 8+ years in cybersecurity risk management or GRC, including 3+ years in a program or project management role.
• Experience scaling a cybersecurity risk management program in fast-paced tech, SaaS, or cloud companies.
• Strong program management skills: planning, dependency mgmt, estimation, status reporting, cross-functional delivery.
• Solid knowledge of risk management methodologies (NIST RMF/800-37/800-30, ISO 27005, COBIT) and security frameworks (ISO 27001/2, SOC 2, FedRAMP, NIST CSF/800-53, CIS Controls, PCI DSS, HIPAA).
• Ability to engage with engineering teams and follow remediation plans; credible with technical teams.

Responsibilities

• Support operations for the Cybersecurity Risk Management Program.
• Conduct risk assessments and triage security issues related to Rubrik’s products and infrastructure.
• Draft risk statements translating findings into business impact with clear rationale.
• Maintain accurate risk register with ownership, status, dates, and treatment decisions.
• Coordinate cross-functional risk initiatives, manage timelines and dependencies, escalate blockers.
• Drive remediation to closure with regular check-ins and leadership reporting.
• Prepare materials for risk committee meetings and support risk governance cadence.
• Collect and analyze KPIs/KRIs, build dashboards, and report risk updates to leadership.
• Scale risk assessments across enterprise, technical, and third-party providers; ensure consistency in methodology and turnaround.
• Conduct cybersecurity risk assessments (inherent and residual) for systems and cloud initiatives; gather evidence and validate controls.
• Map activities to compliance obligations (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and emerging regulations.
• Support tooling, automation, and AI-enabled improvements; pilot use cases and drive standardized workflows.
• Identify gaps and suggest process improvements for efficiency and effectiveness.

Skills

Program management

Risk management

Stakeholder communication

Cloud security awareness

Education

Bachelor's degree in Security, Computer Science, MIS, or related field

Tools

Jira

Confluence

Tableau

Job description

Rubrik is seeking a Manager, CyberSecurity Risk Management to drive day-to-day operations of Rubrik's risk program. You will coordinate cross-functional risk assessments, track remediation, and produce leadership-facing risk reports, partnering with Security, Engineering, Product, IT, Legal, Procurement, and Finance.

Strong PM discipline and risk/compliance knowledge are essential. You will map activities to frameworks (ISO 27001, SOC 2, NIST CSF, PCI DSS, HIPAA) and drive KPI/KRI reporting.