Rubrik: Manager, CyberSecurity Risk Management — Remote

About Rubrik

Rubrik provides data-security and resilience technology for organisations facing cyberattacks, malicious activity and operational disruption. Its recruitment material discusses protecting enterprise information, including data held in business software and cloud environments. The described portfolio includes security and protection for SaaS applications, with attention to access, backup and recovery. Its business connects the technical handling of information with an organisation's ability to keep critical data protected and to recover when normal operations are disrupted.

The position and its setting

Rubrik lists Manager, CyberSecurity Risk Management in Remote, under reference 8306164. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.

• Department: Information Security
• Employer listing date: 21 October 2026

Responsibilities and work described

• A Manager, CyberSecurity Risk Management to join our security risk management team and support the delivery of Rubrik's cybersecurity risk management program
• Partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to keep work on track and deliver measurable outcomes
• Success in this role requires program management discipline, risk and compliance knowledge, and the ability to influence and build consensus at every level of the company
• Support: program operations for the overall Cybersecurity Risk Management Program
• Support: and conduct risk assessments and triage incoming security issues related to Rubrik’s core products, services, and infrastructure
• Draft clear risk statements that translate technical findings into business impact, including likelihood/impact rationale and key assumptions
• Maintenance: and update the risk register, ensuring ownership, status, target dates, and risk treatment decisions are accurate and timely
• Coordination: and track cross-functional risk initiatives, managing timelines, dependencies, and action items; flag delivery risks early and drive follow-through
• Drive remediation of risks to closure by conducting periodic cross-functional check-ins with risk owners to obtain updates, track milestones and target dates, document progress in the risk register, remove/escalate blockers, and communicate status through leadership reporting
• Support: the risk governance cadence, including preparing materials for risk committee meetings, facilitating risk acceptance and exception reviews, and tracking escalations, decisions, and actions to completion
• Collect and analyze program metrics (KPIs/KRIs), build dashboards, and help prepare risk updates for leadership
• Support: the risk assessment program at scale, including enterprise, technical, and third-party/supplier risk assessments, helping keep methodology, quality, and turnaround times consistent
• Execute and document cybersecurity risk assessments (inherent and residual) for systems, applications, cloud services, and initiatives; gather evidence and validate control implementation with stakeholders
• Help map program activities to compliance obligations and frameworks (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and emerging regulations (e.g., DORA, NIS2, EU AI Act)
• Contribution: to risk quantification efforts so risks can be prioritized in business and financial terms
• Identify gaps and recommend process improvements to make risk management activities more efficient, consistent, and effective

Essential requirements and candidate background

• 8+ years of experience in cybersecurity risk management, or GRC, including at least 3 years in a program or project management role
• Experience supporting or helping scale a cybersecurity risk management program in a fast-paced technology, SaaS, or cloud company
• Program management skills: project planning, dependency management, effort estimation, status reporting, and delivery of cross-functional initiatives
• Knowledge: risk management methodologies (NIST RMF / 800-37 / 800-30, ISO 27005, COBIT) and common security frameworks such as ISO 27001/2, SOC 2, FedRAMP, NIST CSF / 800-53, CIS Controls, PCI DSS, and HIPAA
• Enough technical understanding of cloud, identity, network, and application security to engage credibly with engineering teams and follow remediation plans
• Able to communicate risk clearly to senior stakeholders and build consensus without direct authority
• Experience: agile project management and reporting tools (e.g., Jira, Confluence, Tableau)
• Written and verbal communication, organization, and stakeholder management skills
• Bachelor's degree in Security, Computer Science, Management Information Systems, or a related field, or equivalent practical experience
• #LI-remote
• The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits
• The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location
• Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training
• US (SF Bay Area, DC Metro, NYC, Seattle) Pay Range
• $181,600 — $272,400 USD
• US2 (all other US offices/remote) Pay Range
• $163,400 — $245,200 USD

Location, schedule and contract conditions

For this overseas or regional listing, confirm work authorisation and any location restrictions with the employer. The location does not establish visa sponsorship or permission to work remotely from India.

• Work arrangement: Remote
• Advertised location: Remote

Conditions requiring the complete notice

Some passages contain complex or combined conditions that have not been reduced to short eligibility statements here. Read the complete linked notice for those passages, including any alternatives, exceptions or restrictions. The concise facts above should not be treated as the full wording of every condition.

Pay and application dates

A verified salary figure is not established in this article. An online estimate for another Manager, CyberSecurity Risk Management vacancy is not an offer for reference 8306164; use the employer’s own pay disclosure and recruitment communication.

A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.

How to apply to Rubrik

Applications follow the official employer page linked below.

Open the official Rubrik posting below and match the title and reference 8306164.

Compare your qualifications and experience with the essential conditions for the Remote position, then read the preferred criteria separately.

Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.

Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.

Practical preparation: Tableau

A Tableau example can explain the audience, the decision the dashboard supported and the data preparation required. Discuss how you checked calculations, filters and the interpretation of the displayed results.

Relevant skills

• AI/ML
• LLMs
• ISO
• Tableau
• AI
• cybersecurity
• process improvement
• audit
• risk management
• compliance
• training