Job Summary

 

Company Description

Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management, delivering a single platform to manage and protect data in the cloud, at the edge, and on-premises. Enterprises choose Rubrik to simplify backup and recovery, accelerate cloud adoption, enable automation at scale, and secure against cyberthreats. Rubrik has raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. We’ve been recognized as a Forbes Cloud 100 Company five years in a row and as a LinkedIn Top 10 startup. 

Information Security - Who We Are

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.

What You’ll Do:

Rubrik is seeking a Senior Information Security Analyst to help drive and support our team globally on our Security Compliance product certifications, audits and improve the maturity of our systems, tools and processes. In this role, you will prepare Rubrik to expand our product certifications and compliance offerings as well as help drive our existing ones. As a member of the Security Compliance team, you are a highly motivated individual who will be responsible for the execution and continuous maturity of these services. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.

Mandatory Skill Sets-  “security compliance” “PCI”, “HIPAA”, “ISAE”, “SOC 2”, “NIST 800-53", “ISO”, “coordinated audits”, “integrated audits”, “unified control framework

Responsibilities:

  • Be an integral member of the security and compliance team to build and maintain strong cross-functional relationships across the company, aid in achieving consensus, expectation setting, security compliance, training and awareness, and promote consistency and improvement in our processes.
  • Drive security compliance product certifications including managing external and internal audits, performing readiness assessments for standards and frameworks, and making recommendations on policies, processes, awareness training, roadmap and priorities.
  • Manage and drive coordinated / integrated audits (e.g. SOC 2 / ISAE 3000, PCI, HIPAA, etc.)
  • Help manage and maintain Rubrik’s Unified Control Framework, implement and manage assessments and audits within our Infosec GRC tool
  • Support the development, revision and finalization of security and compliance control language in internal and external audit documentation.
  • Be well-versed in vulnerability management and penetration testing practices as they pertain to the requirements and control frameworks and standards above.
  • Be well-versed in Rubrik's products as they pertain to security and compliance features and secure SDLC practices.
  • Drive continuous improvements to the external facing compliance web page that disseminates security and compliance related efforts.
  • Contribute to the maturity and measurement of the security compliance program by developing and revising operational metrics, and creating dashboards in GRC tools, Tableau and JIRA/Confluence.
  • Contribute to security program development by identifying new or emerging opportunities to apply security principles and technologies.

 

Preferred Qualifications:

  • 6+ years of related work experience in information security governance, risk and compliance (GRC) or relevant compliance roles in the tech industry.
  • Experience driving security compliance certifications and audit programs within a B2B SaaS provider.
  • Experience managing integrated audits (e.g. SOC 2 / ISAE 3000, PCI, HIPAA, etc.,)
  • Strong understanding of relevant information security and compliance frameworks including ISAE 3000 / 3402, PCI DSS, HIPAA, SOC 2 Trust Services Criteria, ISO 27001/2 (including ISO 27017 & 18), CIS Top 20, COSO, NIST CSF / 800-53, and FedRAMP.
  • Knowledge of audit methodologies, such as SOX and COBIT.
  • Experience with implementing and managing GRC tools for managing a company’s Unified Control Framework and conducting internal and external audits.
  • Experience with the use of, management of Confluence wiki pages, JIRA Boards for tracking security compliance gaps through to remediation and Tableau for metrics reporting.
  • Can implement a solution (design), operational plan, and roadmap to achieve goals.
  • Knows how to estimate work effort and incubate skill sets to achieve team goals.
  • Has knowledge of common security risks, vulnerabilities, and threats, SSDLC, and can make recommendations and review processes pertaining to these areas based on security compliance requirements.
  • Detail-oriented, organized and able to understand the bigger picture by using technical expertise and problem solving abilities to prioritize and manage issues.
  • Ability to ramp up quickly and learn new technologies and products with minimal lag time.
  • Strong communications skills and the ability to discuss issues at technical and business levels with audiences of various backgrounds.
  • Bachelor’s degree in Security, Computer Science, Management Information Systems, Engineering or related field, and in a high growth business environment preferred.
  • SaaS and data management industry experience.
  • Professional certifications in Information Security or Risk Management (e.g. CISSP, CISA, CISM, CCSK, CRISC, CGEIT, CSX-P, PCI-QSA) is a plus.
  • Project Management experience and PMP certification is a plus

 

Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age or disability. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

 

 



About Rubrik:

Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.

We are a leader in data security, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.

Linkedin | Twitter | InstagramRubrik.com

Diversity, Equity & Inclusion @ Rubrik: 

At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.

Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.

Our DEI strategy focuses on three core areas of our business and culture:

  • Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. 
  • Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.
  • Our Communities: Expand our commitment to diversity, equity, & inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.
Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. 
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
EEO IS THE LAW
EEO IS THE LAW - POSTER SUPPLEMENT
PAY TRANSPARENCY NONDISCRIMINATION PROVISION
NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Apply For This Job

* Required

NONDISCLOSURE AGREEMENT

In consideration of any disclosure of certain nonpublic or confidential information, you hereby enter into this Nondisclosure Agreement (the “Agreement”) and agree as follows:

  1. Confidential Information. In connection with a potential business relationship or other business purposes, Rubrik, Inc. (the “Company”) has granted you (the individual or entity named below) access, or may grant you access, to business, technical or other nonpublic information, materials and/or ideas (“Confidential Information,” which term shall include, without limitation, anything you learn or discover as a result of exposure to or analysis of any Confidential Information).
  2. Obligations. You will hold in confidence and will not possess or use (except as required to evaluate the proposed business relationship) or disclose any Confidential Information except information you can document which (i) is in the public domain through no fault of yours, (ii) was properly known to you, without restriction, prior to disclosure by Company or (iii) was properly disclosed to you by another person without restriction. You will not reverse engineer or attempt to derive the composition or underlying information, structure or ideas of any Confidential Information.  You will not export, re-export, resell, ship or divert or cause to be exported, re-exported, resold, shipped or diverted, directly or indirectly, any Confidential Information or product thereof.  You will promptly notify Company of any unauthorized release, disclosure or use of Confidential   You will strictly abide by any and all instructions and restrictions provided by Company from time to time with respect to Confidential Information or Company systems. You will ensure the security of any facilities, machines, accounts, passwords and methods you use to store any Confidential Information or to access Company systems and ensure that no other person has or obtains access thereto.
  3. Return of Information.  If you decide not to proceed with the potential business relationship or if asked by Company, you will promptly return all Confidential Information and all copies, extracts and other objects or items in which Confidential Information may be contained or embodied. 
  4. No License.  This Agreement does not grant a license to you in or to any of the Confidential Information.
  5. Feedback.  You may, at your option and in your sole discretion, provide suggestions or feedback related to the Company’s products or services.  In no event will such suggestions or feedback be considered confidential or proprietary to you.  The Company will be free to use such suggestions as it chooses, without compensation to you.
  6. Disclaimer. Confidential Information is provided to you “as is” and the Company makes no warranties with respect to the Confidential Information or any materials provided by the Company.  In no event will the Company be liable for the accuracy or completeness of the Confidential Information.  You understand that nothing herein (i) requires the disclosure of any Confidential Information of the Company or (ii) requires the Company to proceed with any transaction or relationship.  You understand that this Agreement does not obligate the Company to disclose any information or negotiate or enter into any agreement or relationship.
  7. Miscellaneous.  The terms of this Agreement will remain in effect with respect to any particular Confidential Information until you can document that such Confidential Information falls into one of the exceptions stated in Section 2 above.  You acknowledge and agree that due to the unique nature of the Confidential Information, any breach of this Agreement would cause irreparable harm to Company for which damages are not an adequate remedy, and that Company shall therefore be entitled to equitable relief in addition to all other remedies available at law.  This Agreement is personal to you, nonassignable by you, governed by the internal laws of the State of California and may be modified or waived only in writing signed by both parties.  If any provision of this Agreement is found to be unenforceable, such provision will be limited or deleted to the minimum extent necessary so that the remaining terms remain in full force and effect.  The prevailing party in any dispute or legal action regarding the subject matter of this Agreement shall be entitled to recover attorneys’ fees and costs.
Type your full name in the box below to acknowledge your agreement to the above NDA
Locate Me

Please view our Candidate Privacy Notice here.