Senior Cybersecurity Risk Program Manager (Remote)

Rubrik; Salem (OR); Remote; USD 163,000 - 272,000; Full time

Job summary

Rubrik is seeking a seasoned Manager, CyberSecurity Risk Management to lead and coordinate Rubrik's cybersecurity risk management program. You will partner with Security, Engineering, Product, IT, Legal, Procurement and Finance to drive risk assessments, track remediation, and produce leadership-ready risk reporting.

You will maintain the risk register, draft risk statements, and support governance through risk committee materials, KPIs/KRIs, and scalable risk assessment activities, including

Qualifications

• 8+ years of experience in cybersecurity risk management, or GRC, including at least 3 years in a program or project management role.
• Experience supporting or helping scale a cybersecurity risk management program in a fast-paced technology, SaaS, or cloud company.
• Solid working knowledge of risk management methodologies (NIST RMF/800-37/800-30, ISO 27005, COBIT) and common security frameworks such as ISO 27001/2, SOC 2, FedRAMP, NIST CSF/800-53, CIS Controls, PCI DSS, and HIPAA.

Responsibilities

• Support program operations for the overall Cybersecurity Risk Management Program.
• Support and conduct risk assessments and triage incoming security issues related to Rubrik’s core products, services, and infrastructure.
• Draft clear risk statements that translate technical findings into business impact, including likelihood/impact rationale and key assumptions.
• Maintain and update the risk register, ensuring ownership, status, target dates, and risk treatment decisions are accurate and timely.
• Coordinate and track cross-functional risk initiatives, managing timelines, dependencies, and action items; flag delivery risks early and drive follow-through.
• Drive remediation of risks to closure by conducting periodic cross-functional check-ins with risk owners to obtain updates, track milestones and target dates, document progress in the risk register, remove/escalate blockers, and communicate status through leadership reporting.
• Support the risk governance cadence, including preparing materials for risk committee meetings, facilitating risk acceptance and exception reviews, and tracking escalations, decisions, and actions to completion.
• Collect and analyze program metrics (KPIs/KRIs), build dashboards, and help prepare risk updates for leadership.
• Support the risk assessment program at scale, including enterprise, technical, and third-party/supplier risk assessments, helping keep methodology, quality, and turnaround times consistent.
• Execute and document cybersecurity risk assessments (inherent and residual) for systems, applications, cloud services, and initiatives; gather evidence and validate control implementation with stakeholders.
• Help map program activities to compliance obligations and frameworks (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and emerging regulations (e.g., DORA, NIS2, EU AI Act).
• Contribute to risk quantification efforts so risks can be prioritized in business and financial terms.
• Support GRC tooling, automation, and AI-enabled improvement initiatives by gathering requirements, coordinating implementation tasks, piloting use cases (e.g., LLM-assisted intake triage, evidence mapping, and automated status summarization), and driving adoption of standardized workflows with appropriate governance and human review.
• Identify gaps and recommend process improvements to make risk management activities more efficient, consistent, and effective.

Skills

Cybersecurity risk management

Program management

Risk assessment

GRC frameworks

Agile project management

Education

Bachelor's degree in Security, Computer Science, MIS, or related field

Tools

Jira

Confluence

Tableau

Job description

Rubrik is seeking a seasoned Manager, CyberSecurity Risk Management to lead and coordinate Rubrik's cybersecurity risk management program. You will partner with Security, Engineering, Product, IT, Legal, Procurement and Finance to drive risk assessments, track remediation, and produce leadership-ready risk reporting.

You will maintain the risk register, draft risk statements, and support governance through risk committee materials, KPIs/KRIs, and scalable risk assessment activities, including