{"id":3012858,"url":"https://alion.io/job/rubrik-manager-cybersecurity-risk-management","title":"Manager, CyberSecurity Risk Management","company":{"id":1145,"name":"Rubrik","domain":"rubrik.com","url":"https://alion.io/company/rubrik","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":84,"open_postings":21,"ghost_share":0,"stale_share":0.619,"repost_share":0.048,"time_to_fill_p50_days":44,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":181600,"max":272400,"currency":"USD","period":"year","gross":null,"usd_annual":272400},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Confluence","optional":false},{"name":"EU AI Act","optional":false},{"name":"FedRAMP","optional":false},{"name":"Fine-tuning","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Tableau","optional":false}],"status":"live","first_seen_at":"2026-10-21T14:58:51Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-24T23:36:03Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About the team:\nThe Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. \nAbout the role:\nWe are looking for a Manager, CyberSecurity Risk Management to join our security risk management team and support the delivery of Rubrik's cybersecurity risk management program. Working closely with the team's lead Program Manager, who owns the program, you will help drive day-to-day execution: coordinating cross-functional risk assessments, supporting risk review and acceptance processes, tracking risk remediation to closure, and producing risk reporting that gives leadership a clear view of Rubrik's cybersecurity risk posture. You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to keep work on track and deliver measurable outcomes. Success in this role requires strong program management discipline, solid risk and compliance knowledge, and the ability to influence and build consensus at every level of the company.\nWhat you’ll do:\nSupport program operations for the overall Cybersecurity Risk Management Program.\nSupport and conduct risk assessments and triage incoming security issues related to Rubrik’s core products, services, and infrastructure. \nDraft clear risk statements that translate technical findings into business impact, including likelihood/impact rationale and key assumptions. \nMaintain and update the risk register, ensuring ownership, status, target dates, and risk treatment decisions are accurate and timely.\nCoordinate and track cross-functional risk initiatives, managing timelines, dependencies, and action items; flag delivery risks early and drive follow-through.\nDrive remediation of risks to closure by conducting periodic cross-functional check-ins with risk owners to obtain updates, track milestones and target dates, document progress in the risk register, remove/escalate blockers, and communicate status through leadership reporting. \nSupport the risk governance cadence, including preparing materials for risk committee meetings, facilitating risk acceptance and exception reviews, and tracking escalations, decisions, and actions to completion.\nCollect and analyze program metrics (KPIs/KRIs), build dashboards, and help prepare risk updates for leadership.\nSupport the risk assessment program at scale, including enterprise, technical, and third-party/supplier risk assessments, helping keep methodology, quality, and turnaround times consistent.\nExecute and document cybersecurity risk assessments (inherent and residual) for systems, applications, cloud services, and initiatives; gather evidence and validate control implementation with stakeholders.\nHelp map program activities to compliance obligations and frameworks (ISO 27001, SOC 2, FedRAMP, NIST CSF/800-53, PCI DSS, HIPAA) and emerging regulations (e.g., DORA, NIS2, EU AI Act).\nContribute to risk quantification efforts so risks can be prioritized in business and financial terms.\nSupport GRC tooling, automation, and AI-enabled improvement initiatives by gathering requirements, coordinating implementation tasks, piloting use cases (e.g., LLM-assisted intake triage, evidence mapping, and automated status summarization), and driving adoption of standardized workflows with appropriate governance and human review.\nIdentify gaps and recommend process improvements to make risk management activities more efficient, consistent, and effective.\nExperience you'll need:\n 8+ years of experience in cybersecurity risk management, or GRC, including at least 3 years in a program or project management role.\n Experience supporting or helping scale a cybersecurity risk management program in a fast-paced technology, SaaS, or cloud company.\n Strong program management skills: project planning, dependency management, effort estimation, status reporting, and delivery of cross-functional initiatives.\n Solid working knowledge of risk management methodologies (NIST RMF / 800-37 / 800-30, ISO 27005, COBIT) and common security frameworks such as ISO 27001/2, SOC 2, FedRAMP, NIST CSF / 800-53, CIS Controls, PCI DSS, and HIPAA.\n Enough technical understanding of cloud, identity, network, and application security to engage credibly with engineering teams and follow remediation plans.\n Able to communicate risk clearly to senior stakeholders and build consensus without direct authority.\n Hands-on experience with agile project management and reporting tools (e.g., Jira, Confluence, Tableau).\n Excellent written and verbal communication, organization, and stakeholder management skills.\n Bachelor's degree in Security, Computer Science, Management Information Systems, or a related field, or equivalent practical experience.\nThe minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.\nUS (SF Bay Area, DC Metro, NYC, Seattle) Pay Range\n$181,600—$272,400 USD\nThe minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.\nUS2 (all other US offices/remote) Pay Range\n$163,400—$245,200 USD\nJoin Us in Securing and Accelerating the World's AI Transformation\nRubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes. \nLinkedin | X (formerly Twitter) | Instagram | Rubrik.com\nInclusion @ Rubrik\nAt Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.\nOur goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.\nOur inclusion strategy focuses on three core areas of our business and culture:\nOur Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.\n\nOur Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.\n\nOur Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.\n\nEqual Opportunity Employer/Veterans/Disabled\nRubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.\nRubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact . Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.\nEEO IS THE LAW\nNOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS","description_format":"text","description_chars":9337,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Cloud Security","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-21T15:43:51Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 113 · green card filings: 25","filings_12m":113,"filings_prev_12m":117,"green_card_filings_12m":25,"median_offered_wage_usd":191594,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":44,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":272400,"is_top_pay":true},"html_url":"https://alion.io/job/rubrik-manager-cybersecurity-risk-management","json_url":"https://alion.io/job/rubrik-manager-cybersecurity-risk-management.json","meta":{"generated_at":"2026-10-24T23:48:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34927,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1145},"rest":"https://alion.io/mcp/rest/get_company?id=1145"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frubrik-manager-cybersecurity-risk-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frubrik-manager-cybersecurity-risk-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frubrik-manager-cybersecurity-risk-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rubrik-manager-cybersecurity-risk-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frubrik-manager-cybersecurity-risk-management"}]}