SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 163,400 - 245,200 / annual
Rubrik's Information Security organization is seeking a Manager, Cybersecurity Risk Management to support the delivery of the company's cybersecurity risk management program. Working closely with the Program Manager who owns the program, you will drive day-to-day execution of critical security initiatives.
Key responsibilities include:
- Support program operations for the overall Cybersecurity Risk Management Program
- Conduct and support risk assessments, triaging incoming security issues related to Rubrik's core products, services, and infrastructure
- Draft clear risk statements that translate technical findings into business impact, including likelihood/impact rationale and key assumptions
- Maintain and update the risk register, ensuring ownership, status, target dates, and risk treatment decisions are accurate and timely
- Coordinate and track cross-functional risk initiatives, managing timelines, dependencies, and action items; flag delivery risks early and drive follow-through
- Drive remediation of risks to closure by conducting periodic cross-functional check-ins with risk owners, tracking milestones, documenting progress, removing blockers, and communicating status through leadership reporting
- Support the risk governance cadence, including preparing materials for risk committee meetings, facilitating risk acceptance and exception reviews, and tracking escalations and decisions
- Collect and analyze program metrics (KPIs/KRIs), build dashboards, and help prepare risk updates for leadership
- Support the risk assessment program at scale, including enterprise, technical, and third-party/supplier risk assessments
- Execute and document cybersecurity risk assessments (inherent and residual) for systems, applications, cloud services, and initiatives
- Help map program activities to compliance obligations and frameworks (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and emerging regulations (DORA, NIS2, EU AI Act)
- Contribute to risk quantification efforts so risks can be prioritized in business and financial terms
- Support GRC tooling, automation, and AI-enabled improvement initiatives by gathering requirements, coordinating implementation, piloting use cases, and driving adoption of standardized workflows
- Identify gaps and recommend process improvements to make risk management activities more efficient, consistent, and effective
You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to keep work on track and deliver measurable outcomes. Success requires strong program management discipline, solid risk and compliance knowledge, and the ability to influence and build consensus at every level of the company.
REQUIREMENTS:
- 8+ years of experience in cybersecurity risk management or GRC, including at least 3 years in a program or project management role
- Experience supporting or helping scale a cybersecurity risk management program in a fast-paced technology, SaaS, or cloud company
- Strong program management skills: project planning, dependency management, effort estimation, status reporting, and delivery of cross-functional initiatives
- Solid working knowledge of risk management methodologies (NIST RMF / 800-37 / 800-30, ISO 27005, COBIT) and common security frameworks such as ISO 27001/2, SOC 2, FedRAMP, NIST CSF / 800-53, CIS Controls, PCI DSS, and HIPAA
- Enough technical understanding of cloud, identity, network, and application security to engage credibly with engineering teams and follow remediation plans
- Able to communicate risk clearly to senior stakeholders and build consensus without direct authority
- Hands-on experience with agile project management and reporting tools (e.g., Jira, Confluence, Tableau)
- Excellent written and verbal communication, organization, and stakeholder management skills
- Bachelor's degree in Security, Computer Science, Management Information Systems, or a related field, or equivalent practical experience
