Products
Solutions
Resources
Partners
RUBRIK ZERO LABS
SUPPORT
Contact sales

Job Summary

Rubrik is seeking a highly experienced and strategic Director of Cyber Risk Management, Business Resilience, and Security Culture to lead our efforts in identifying, assessing, mitigating, and monitoring cyber risks across the organization. This role is pivotal in ensuring the continuity of business operations in the face of cyber threats and fostering a strong, proactive security-aware culture. In partnership with the Sr. Director of GRC, the Director will be responsible for developing and implementing comprehensive strategies for cyber risk management, enhancing business resiliency capabilities, and driving security awareness and education programs. This role requires a strong leader with deep technical expertise, excellent communication skills, and a proven track record in influencing risk owners to drive accountability in reducing Rubrik’s risk profile and ensuring the appropriate security posture.  In addition, a strong team exists to support the Director in these areas. Therefore, maintaining Rubrik’s culture and retaining talent is a primary responsibility for this role.

 

Key Responsibilities

Cyber Risk Management:

  • Lead and oversee the continuous evolution and operationalization of the cyber risk management program and operating the Risk Management Lifecycle, ensuring alignment with industry best practices (e.g., NIST, ISO 27001).
  • Influence business/risk owners to drive risk accountability and proactive reduction of cyber risks and ensure the security posture aligns with business objectives and risk appetite.
  • Strategize and prioritize regular cyber risk assessments, identifying vulnerabilities, threats, and potential impacts to critical assets and business processes.
  • Lead the cyber risk team and third party security team in delivering the outcomes associated with the Risk Management Lifecycle, providing oversight of Rubrik’s risk register and findings boards, prioritizing and tracking the remediation of identified risks, working closely with IT, engineering, and business units.
  • Leverage existing tools for risk quantification to help risk and business owners understand the overall Return on Investment (ROI) associated with risk mitigating initiatives and their impact on the security posture in terms of investment and return.
  • Provide comprehensive cyber risk reporting, including monthly operational reports, monthly executive summaries, and quarterly board-level presentations.

 

Business Resiliency (Disaster Recovery & Business Continuity):

  • Provide strategic oversight and direction for Rubrik's business continuity and disaster recovery programs, ensuring alignment with overall business objectives and risk appetite.
  • Develop and evolve the long-term strategy for enhancing organizational resilience against various disruptions, including cyberattacks, natural disasters, and operational failures.
  • Guide and support strong leaders reporting into this role in the execution of business continuity and disaster recovery plans, including regular testing, simulation exercises, and post-incident reviews.
  • Establish and monitor key metrics for business resiliency, ensuring continuous improvement and adherence to established recovery time objectives (RTOs) and recovery point objectives (RPOs).
  • Collaborate with key stakeholders to integrate resiliency considerations into strategic planning and major initiatives.

Security Culture & Awareness:

  • Define and drive the strategic vision for a pervasive and proactive security culture across the entire organization, ensuring it is embedded in all aspects of business operations.
  • Guide and empower the strong program manager reporting into this role to design and implement innovative awareness campaigns, educational content, and communication strategies that foster individual accountability and promote secure behaviors.
  • Establish metrics and reporting mechanisms to assess the impact and effectiveness of security culture initiatives, continuously refining the approach based on organizational needs and evolving threat landscapes.
  • Champion security as a shared responsibility, working with senior management to ensure adequate resources and support for cultural transformation efforts.

Governance & Compliance:

  • Strategically contribute to the governance and compliance programs and collaborate with leaders of those programs to ensure gaps in control efficacy and policy exceptions flow into the Risk Management Lifecycle.
  • Support internal and external audits related to cyber risk, business resilience and security culture.

Stakeholder Engagement:

  • Collaborate cross-functionally with Security Operations and other security champions to identify and record findings to trigger the Risk Management Lifecycle.
  • Collaborate and partner with  IT, Legal, Procurement, HR, Audit and various business units to integrate security and resiliency into business processes.
  • Communicate complex cyber risk and resiliency concepts to technical and non-technical audiences, including executive leadership.
  • Provide strategic direction and oversight of relationships with external vendors and partners related to cyber risk, resiliency, and security awareness.

Qualifications

  • 15+ years of progressive experience in information security, preferably inhouse within a SaaS organization, with at least 8 years in a leadership role focused on cyber risk management, business continuity, and security awareness.
  • Demonstrated expertise in cyber risk assessment methodologies and frameworks (e.g., NIST RMF, ISO 27005).
  • Strong understanding of business continuity and disaster recovery planning principles and practices (e.g., ISO 22301, BCI Good Practice Guidelines).Proven experience in developing and delivering effective security awareness and training programs.
  • Excellent written and verbal communication skills, with the ability to articulate complex security concepts to diverse audiences.
  • Strong analytical and problem-solving abilities.
  • Ability to work independently and collaboratively in a fast-paced environment.
  • Proven track record in hiring highly talented individuals and ability to retain talent
  • Emotional intelligence necessary to lead a high performing team and maintain Rubrik’s culture and values (Resilience, Integrity, Velocity, Excellence & Transparency

Preferred Qualifications

  • Bachelor's degree in Computer Science, Information Security, Business Administration, or a related field.
  • Master's degree in a relevant field.
  • Relevant industry certifications such as CISSP, CISM, CRISC, CBCP, or equivalent.
  • Experience in a highly regulated industry but understanding of risk associated with a SaaS organization delivering for customers that are in a highly regulated environment.
  • Familiarity with Jira, Confluence and risk quantification tools
  • Experience with cloud security risks and controls (AWS, Azure, GCP).
  • Unique ability to roll up sleeves and get involved in the tactics while also developing strategy, building, and leading a team

 

Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

#LI-KY1

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
US (SF Bay Area, DC Metro, NYC) Pay Range
$242,500—$339,700 USD
The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
US2 (all other US offices/remote) Pay Range
$218,200—$305,800 USD

Join Us in Securing the World's Data

Rubrik (NYSE: RBRK) is on a mission to secure the world’s data. With Zero Trust Data Security™, we help organizations achieve business resilience against cyberattacks, malicious insiders, and operational disruptions. Rubrik Security Cloud, powered by machine learning, secures data across enterprise, cloud, and SaaS applications. We help organizations uphold data integrity, deliver data availability that withstands adverse conditions, continuously monitor data risks and threats, and restore businesses with their data when infrastructure is attacked.

Linkedin | X (formerly Twitter) | Instagram | Rubrik.com

Inclusion @ Rubrik

At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.

Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.

Our inclusion strategy focuses on three core areas of our business and culture:

  • Our Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.

  • Our Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.

  • Our Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.

Equal Opportunity Employer/Veterans/Disabled

Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. 

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.

EEO IS THE LAW

NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Apply For This Job

* Required

NONDISCLOSURE AGREEMENT

In consideration of any disclosure of certain nonpublic or confidential information, you hereby enter into this Nondisclosure Agreement (the “Agreement”) and agree as follows:

  1. Confidential Information. In connection with a potential business relationship or other business purposes, Rubrik, Inc. (the “Company”) has granted you (the individual or entity named below) access, or may grant you access, to business, technical or other nonpublic information, materials and/or ideas (“Confidential Information,” which term shall include, without limitation, anything you learn or discover as a result of exposure to or analysis of any Confidential Information).
  2. Obligations. You will hold in confidence and will not possess or use (except as required to evaluate the proposed business relationship) or disclose any Confidential Information except information you can document which (i) is in the public domain through no fault of yours, (ii) was properly known to you, without restriction, prior to disclosure by Company or (iii) was properly disclosed to you by another person without restriction. You will not reverse engineer or attempt to derive the composition or underlying information, structure or ideas of any Confidential Information.  You will not export, re-export, resell, ship or divert or cause to be exported, re-exported, resold, shipped or diverted, directly or indirectly, any Confidential Information or product thereof.  You will promptly notify Company of any unauthorized release, disclosure or use of Confidential   You will strictly abide by any and all instructions and restrictions provided by Company from time to time with respect to Confidential Information or Company systems. You will ensure the security of any facilities, machines, accounts, passwords and methods you use to store any Confidential Information or to access Company systems and ensure that no other person has or obtains access thereto.
  3. Return of Information.  If you decide not to proceed with the potential business relationship or if asked by Company, you will promptly return all Confidential Information and all copies, extracts and other objects or items in which Confidential Information may be contained or embodied. 
  4. No License.  This Agreement does not grant a license to you in or to any of the Confidential Information.
  5. Feedback.  You may, at your option and in your sole discretion, provide suggestions or feedback related to the Company’s products or services.  In no event will such suggestions or feedback be considered confidential or proprietary to you.  The Company will be free to use such suggestions as it chooses, without compensation to you.
  6. Disclaimer. Confidential Information is provided to you “as is” and the Company makes no warranties with respect to the Confidential Information or any materials provided by the Company.  In no event will the Company be liable for the accuracy or completeness of the Confidential Information.  You understand that nothing herein (i) requires the disclosure of any Confidential Information of the Company or (ii) requires the Company to proceed with any transaction or relationship.  You understand that this Agreement does not obligate the Company to disclose any information or negotiate or enter into any agreement or relationship.
  7. Miscellaneous.  The terms of this Agreement will remain in effect with respect to any particular Confidential Information until you can document that such Confidential Information falls into one of the exceptions stated in Section 2 above.  You acknowledge and agree that due to the unique nature of the Confidential Information, any breach of this Agreement would cause irreparable harm to Company for which damages are not an adequate remedy, and that Company shall therefore be entitled to equitable relief in addition to all other remedies available at law.  This Agreement is personal to you, nonassignable by you, governed by the internal laws of the State of California and may be modified or waived only in writing signed by both parties.  If any provision of this Agreement is found to be unenforceable, such provision will be limited or deleted to the minimum extent necessary so that the remaining terms remain in full force and effect.  The prevailing party in any dispute or legal action regarding the subject matter of this Agreement shall be entitled to recover attorneys’ fees and costs.
Type your full name in the box below to acknowledge your agreement to the above NDA

See Rubrik’s Candidate Privacy Notice here.

Please share the name of the company or N/A if currently unemployed. 

Locate Me
U.S. Standard Demographic Questions
To ensure that you have an opportunity to disclose your authentic identity, we have provided the following voluntary demographic questions with more comprehensive response options. Your responses will be used (in aggregate only) to help us identify areas of improvement in our interview process and to ensure an equitable and positive candidate experience for all.  Your responses will not be associated with your specific application and will not impact the hiring decision.

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury

Form CC-305

OMB Control Number 1250-0005

Expires 05/31/2023

Voluntary Self-Identification of Disability

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Voluntary Self-Identification


For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Rubrik’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Race & Ethnicity Definitions

Please view our Candidate Privacy Notice here.