Job Information
Rubrik Security Risk Management - Program Manager in Bangalore, India
Information Security - Who We Are
The Information Security (InfoSec) organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.
What You’ll Do
We are looking for a senior information security risk and compliance analyst to be a part of our security risk management team, which focuses on building and supporting a security risk oversight function. Help us elevate and accelerate the maturity of our risk management and compliance capabilities by leading prioritized activities related to our security risk management strategy. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.
Responsibilities:
Lead the collection and in-depth analysis of security risk data, employing advanced quantitative and qualitative techniques.
Strategize and implement comprehensive risk analysis frameworks using real-world security data, advanced analytics, and systems automation.
Regularly document and present sophisticated security risk analyses, fostering collaboration across all organizational levels, including executive leadership.
Drive the enhancement of the security program, identifying and integrating cutting-edge opportunities to apply advanced security principles and technologies.
Oversee and evaluate the security configurations of new or existing applications, software, or utilities, providing high-level risk management recommendations.
Spearhead strategic and technical initiatives, conduct comprehensive Operational Risk Assessments, oversee Risk Acceptance processes, and develop strategic risk posture and remediation plans.
Monitor, assess, and enhance security measures to protect against advanced threats or hazards to information privacy, security, or integrity.
Lead the risk and compliance team, building robust cross-functional relationships across the company to achieve consensus, set expectations, and promote continuous process improvement.
Direct the production and refinement of security governance, risk, and compliance analysis and reporting, ensuring superior content quality and timely delivery.
Own and lead the remediation of complex technical security and compliance risks with cross-functional teams, orchestrating meetings, assigning and tracking tasks, and generating comprehensive reports.
Preferred Qualifications:
7+ years of experience in Information Security Governance, Risk and Compliance (GRC) or relevant high-level compliance roles, preferably in the technology sector.
Proven leadership in managing comprehensive security and/or operational risk frameworks in organizations with sophisticated risk oversight functions.
Expertise in designing and operationalizing risk & control assessments, with a deep understanding of various information levels and assessment strategies.
Proficient in managing risk registers and prioritizing security-related initiatives.
Capable of designing and executing strategic solutions, operational plans, and roadmaps to achieve organizational goals.
Experience in implementing and leveraging agile methodologies within a GRC technology framework.
Demonstrated executive presence, with a track record of representing visions and building consensus among diverse stakeholders.
Advanced skills in estimating work efforts and fostering team skill development to meet objectives.
In-depth knowledge of security risks, vulnerabilities, and threats, with the ability to lead discussions on risk treatment and management.
Comprehensive understanding of prominent information security frameworks, regulatory compliance requirements, and risk management methodologies.
Expertise in risk quantification, with experience in FAIR or similar models for risk analysis and reporting.
Advanced proficiency in data analytics and business intelligence tools, along with agile project management platforms.
Exceptional problem-solving skills, with an ability to grasp the larger context while managing detailed technical issues.
Quick learner with the capacity to adapt to new technologies and methodologies with minimal transition time.
Effective communicator, capable of discussing technical and business issues with varied audiences.
Experience in fast-paced, high-growth environments is desirable.
Advanced degree in Security, Computer Science, Management Information Systems, or a related field is preferred.
Experience in SaaS and data management industries is a plus.
Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P, CISSP, CCSK) are strongly preferred.
About Rubrik:
Rubrik is on a mission to secure the world’s data. With Zero Trust Data Security™, Rubrik helps organizations achieve business resilience against cyberattacks, malicious insiders, and operational disruptions. Rubrik Security Cloud, powered by machine learning, secures data across enterprise, cloud, and SaaS applications. Rubrik helps organizations uphold data integrity, deliver data availability that withstands adverse conditions, continuously monitor data risks and threats, and restore businesses with their data when infrastructure is attacked.
Linkedin (https://www.linkedin.com/company/rubrik-inc/mycompany/verification/) | Twitter (https://twitter.com/rubrikinc) | Instagram (https://www.instagram.com/rubrikinc/) | Rubrik.com
Diversity, Equity & Inclusion @ Rubrik
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally.
Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.
Our Communities: Expand our commitment to diversity, equity, & inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.
Equal Opportunity Employer/Veterans/Disabled
Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
EEO IS THE LAW (https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf)
EEO IS THE LAW - POSTER SUPPLEMENT
PAY TRANSPARENCY NONDISCRIMINATION PROVISION (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf)
NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS