Manager, CyberSecurity Risk Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the operational management of the Cybersecurity Risk Management Program.

• Support and execute risk evaluations while addressing incoming security concerns pertaining to Rubrik’s essential products, services, and infrastructure.

• Compose risk statements that convert technical discoveries into their business implications.

• Sustain and refresh the risk register, detailing ownership, status, target deadlines, and decisions regarding risk treatment.

• Organize and monitor cross-functional risk projects, including timelines, dependencies, and action items.

• Propel risk remediation to completion through regular updates with risk owners, milestone tracking, escalation of blockers, and reporting to leadership.

• Aid in risk governance activities, such as preparing materials for risk committees, conducting reviews for risk acceptance and exceptions, and managing escalations, decisions, and actions.

• Gather and assess KPIs/KRIs, develop dashboards, and prepare updates on risk for leadership.

• Assist in assessments related to enterprise, technical, and third-party/supplier risks.

• Implement and document inherent and residual cybersecurity risk assessments for systems, applications, cloud services, and initiatives.

• Collect evidence and verify control implementations with relevant stakeholders.

• Align program activities with compliance requirements and frameworks, including ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA, DORA, NIS2, and the EU AI Act.

• Contribute to risk quantification initiatives.

• Support GRC tooling, automation, and AI-driven enhancement projects, which involve gathering requirements, coordinating implementation, piloting use cases, and facilitating workflow adoption.

• Identify deficiencies and propose process enhancements.

⛳️ Requirements

• Over 8 years of experience in cybersecurity risk management or GRC, with a minimum of 3 years in a program or project management capacity.

• Proven experience in supporting or scaling a cybersecurity risk management program within a dynamic technology, SaaS, or cloud organization.

• Strong program management capabilities, including project planning, dependency oversight, effort estimation, status reporting, and execution of cross-functional initiatives.

• Comprehensive knowledge of NIST RMF / 800-37 / 800-30, ISO 27005, COBIT, ISO 27001/2, SOC 2, FedRAMP, NIST CSF / 800-53, CIS Controls, PCI DSS, and HIPAA.

• Technical proficiency in cloud, identity, network, and application security.

• Ability to convey risk information effectively to senior stakeholders and foster consensus without direct authority.

• Practical experience with agile project management and reporting tools such as Jira, Confluence, and Tableau.

• Exceptional written and verbal communication, organizational, and stakeholder management skills.

• A Bachelor's degree in Security, Computer Science, Management Information Systems, or a related discipline, or equivalent practical experience.

🏝️ Benefits

• Bonus potential.

• Equity opportunities.

• Comprehensive benefits.

• Commitment to equal employment opportunities.

• Reasonable accommodations for qualified applicants and employees with disabilities.