Job Summary

Company Description

Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management and have raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. Rubrik has been recognized as a Forbes Cloud 100 Company two years in a row and as a LinkedIn Top 10 startup. As cloud adoption continues to grow at an astounding rate, we’ll be solving some of its most interesting challenges while building a product unlike anything seen before. This is a massive challenge and we’re just getting started so there is a lot of opportunity for personal growth and contribution.

Information Security - Who We Are

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 

What You’ll Do

We are looking for a security culture and data governance lead to be a part of our team, which focuses on security governance, risk and compliance at Rubrik. Help run our innovative and immersive security culture program and operationalize strong enterprise data governance at Rubrik. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.

Responsibilities:

  • Manage roadmap of activities related to the security culture program.
  • Design, set up and run regular phishing campaigns for different user populations at Rubrik.
  • Identify and source external security speakers to address the company on relevant topics.
  • Develop and administer security training to various audiences across Rubrik (i.e., new hire onboarding, general and role-based training, compliance-based training).
  • Manage and continuously improve the developer security training program.
  • Design and run various security campaigns (i.e., hackathons, CTF, cybersecurity awareness month)
  • Manage vendors associated with security culture and other areas of responsibility.
  • Develop reports, metrics and continuously mature our security culture program and associated campaigns.
  • Support execution of an enterprise data governance implementation roadmap.
  • Develop data governance standards and provide governance and oversight to enforce standards.
  • Define indicators of performance and quality metrics to ensure compliance with data related policies, standards, roles and responsibilities, and adoption requirements.
  • Roll out an enterprise wide data governance framework, with a focus on improvement of data quality and the protection of sensitive data through modifications to organization behavior policies and standards, principles, governance metrics, processes, related tools and data architecture.
  • Define roles and responsibilities related to data governance and ensure clear accountability for stewardship of the company’s critical information assets.
  • Serve as a liaison between business / functional areas and technology, to ensure that business requirements for protecting sensitive data are clearly defined, communicated, and considered a part of operational prioritization and planning.
  • Assess and implement tool(s) to house data mapping / lineage.
  • Implement use cases and technology to detect sensitive data across the ecosystem and enforce appropriate protections.
  • Identify and drive remediation of data governance related risks to protect sensitive data.
  • Lead critical stakeholder alignment discussions to achieve data governance programmatic objectives; resolve issues escalated by stakeholders from the business and functional areas.
  • Contribute to security program development by identifying new or emerging opportunities to apply security principles and technologies.

 

Preferred Qualifications:

  • 8+ years of related work experience in driving security awareness and training programs, and / or data governance and data security program capabilities.
  • Ability to craft complex communications and messaging in a simple, clear and concise manner to the various communities globally within our organization. 
  • Display practical knowledge of communication channels such as Confluence, Google Sites, etc. to drive positive user behavior change and reduced human security risk.
  • Project management experience - the ability to plan, manage and maintain a complex, long term organization wide program.
  • Knowledge of data governance and data quality practices, business and technology issues related to the management of enterprise information assets and approaches related to data protection.
  • Knowledge of data related government regulatory requirements and emerging trends and issues.
  • Demonstrated consulting skills, with change management concepts and strategies, including communication and performance measurement system design.
  • Knowledge of risk data architecture and technology solutions.
  • Can implement a solution (design), operational plan, and roadmap to achieve goals.
  • Experience implementing agile use cases in a data governance tool.
  • Executive presence: can represent a vision and build consensus across a variety of partners.
  • Knows how to estimate work effort and incubate skill sets to achieve team goals.
  • Has foundational knowledge of common security risks, vulnerabilities, threats and validated understanding of relevant frameworks such as ISO 27001/2, ISO 22301, ISO/IEC 38500/5, ISO 8000-150.
  • Hands-on experience with data analytics and business intelligence dashboarding tools (e.g., Power BI) and with agile project management tools (e.g., Jira).
  • Detail-oriented and able to understand the bigger picture by using your technical expertise and problem solving abilities to prioritize and manage blocking issues.
  • Ability to ramp up quickly and learn new technologies with minimal lag time.
  • Experience in a high growth business environment is a plus.
  • Bachelor’s degree in Security, Computer Science, Management Information Systems or related field preferred.
  • SaaS and data management industry experience is a plus.
  • Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P, CISSP, CCSK) is a plus. 

#LI-MG1

Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. 
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
EEO IS THE LAW
EEO IS THE LAW - POSTER SUPPLEMENT
PAY TRANSPARENCY NONDISCRIMINATION PROVISION
NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Apply For This Job

* Required

NONDISCLOSURE AGREEMENT

In consideration of any disclosure of certain nonpublic or confidential information, you hereby enter into this Nondisclosure Agreement (the “Agreement”) and agree as follows:

  1. Confidential Information. In connection with a potential business relationship or other business purposes, Rubrik, Inc. (the “Company”) has granted you (the individual or entity named below) access, or may grant you access, to business, technical or other nonpublic information, materials and/or ideas (“Confidential Information,” which term shall include, without limitation, anything you learn or discover as a result of exposure to or analysis of any Confidential Information).
  2. Obligations. You will hold in confidence and will not possess or use (except as required to evaluate the proposed business relationship) or disclose any Confidential Information except information you can document which (i) is in the public domain through no fault of yours, (ii) was properly known to you, without restriction, prior to disclosure by Company or (iii) was properly disclosed to you by another person without restriction. You will not reverse engineer or attempt to derive the composition or underlying information, structure or ideas of any Confidential Information.  You will not export, re-export, resell, ship or divert or cause to be exported, re-exported, resold, shipped or diverted, directly or indirectly, any Confidential Information or product thereof.  You will promptly notify Company of any unauthorized release, disclosure or use of Confidential   You will strictly abide by any and all instructions and restrictions provided by Company from time to time with respect to Confidential Information or Company systems. You will ensure the security of any facilities, machines, accounts, passwords and methods you use to store any Confidential Information or to access Company systems and ensure that no other person has or obtains access thereto.
  3. Return of Information.  If you decide not to proceed with the potential business relationship or if asked by Company, you will promptly return all Confidential Information and all copies, extracts and other objects or items in which Confidential Information may be contained or embodied. 
  4. No License.  This Agreement does not grant a license to you in or to any of the Confidential Information.
  5. Feedback.  You may, at your option and in your sole discretion, provide suggestions or feedback related to the Company’s products or services.  In no event will such suggestions or feedback be considered confidential or proprietary to you.  The Company will be free to use such suggestions as it chooses, without compensation to you.
  6. Disclaimer. Confidential Information is provided to you “as is” and the Company makes no warranties with respect to the Confidential Information or any materials provided by the Company.  In no event will the Company be liable for the accuracy or completeness of the Confidential Information.  You understand that nothing herein (i) requires the disclosure of any Confidential Information of the Company or (ii) requires the Company to proceed with any transaction or relationship.  You understand that this Agreement does not obligate the Company to disclose any information or negotiate or enter into any agreement or relationship.
  7. Miscellaneous.  The terms of this Agreement will remain in effect with respect to any particular Confidential Information until you can document that such Confidential Information falls into one of the exceptions stated in Section 2 above.  You acknowledge and agree that due to the unique nature of the Confidential Information, any breach of this Agreement would cause irreparable harm to Company for which damages are not an adequate remedy, and that Company shall therefore be entitled to equitable relief in addition to all other remedies available at law.  This Agreement is personal to you, nonassignable by you, governed by the internal laws of the State of California and may be modified or waived only in writing signed by both parties.  If any provision of this Agreement is found to be unenforceable, such provision will be limited or deleted to the minimum extent necessary so that the remaining terms remain in full force and effect.  The prevailing party in any dispute or legal action regarding the subject matter of this Agreement shall be entitled to recover attorneys’ fees and costs.
Type your full name in the box below to acknowledge your agreement to the above NDA

U.S. Equal Opportunity Employment Information (Completion is voluntary)

Individuals seeking employment at this company are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. You are being given the opportunity to provide the following information in order to help us comply with federal and state Equal Employment Opportunity/Affirmative Action record keeping, reporting, and other legal requirements.

Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Why are you being asked to complete this form?

We are a federal contractor or subcontractor required by law to provide equal employment opportunity to qualified people with disabilities. We are also required to measure our progress toward having at least 7% of our workforce be individuals with disabilities. To do this, we must ask applicants and employees if they have a disability or have ever had a disability. Because a person may become disabled at any time, we ask all of our employees to update their information at least every five years.

Identifying yourself as an individual with a disability is voluntary, and we hope that you will choose to do so. Your answer will be maintained confidentially and not be seen by selecting officials or anyone else involved in making personnel decisions. Completing the form will not negatively impact you in any way, regardless of whether you have self-identified in the past. For more information about this form or the equal employment obligations of federal contractors under Section 503 of the Rehabilitation Act, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition.

Disabilities include, but are not limited to:

  • Autism
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, or HIV/AIDS
  • Blind or low vision
  • Cancer
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or hard of hearing
  • Depression or anxiety
  • Diabetes
  • Epilepsy
  • Gastrointestinal disorders, for example, Crohn's Disease, or irritable bowel syndrome
  • Intellectual disability
  • Missing limbs or partially missing limbs
  • Nervous system condition for example, migraine headaches, Parkinson’s disease, or Multiple sclerosis (MS)
  • Psychiatric condition, for example, bipolar disorder, schizophrenia, PTSD, or major depression

Form CC-305

OMB Control Number 1250-0005

Expires 05/31/2023

Voluntary Self-Identification of Disability

1Section 503 of the Rehabilitation Act of 1973, as amended. For more information about this form or the equal employment obligations of Federal contractors, visit the U.S. Department of Labor's Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Please view our Candidate Privacy Notice here.