Job Summary

About The Team
The Rubrik information Technology team influences business processes, employee experience, and technologies to scale our organization to $1B+. This team creates operational efficiency across the company by centralizing the management of Infrastructure, Technology, and Data. The IT team ensures all stages of the software development lifecycle in a secured environment and scrutinizes the deployment of proper processes and governance. They champion Rubrik on Rubrik and are the first customers of the Engineering teams at Rubrik.

Rubrik Corp IT is constructed of 100% SaaS and 0% on-premises. The IT team caters to accelerated business value enhancement and multiple day-to-day business processes through our varied SaaS applications like Salesforce.com, Oracle Netsuite, Workday, Snowflake, Etrade, MulSoft, etc. This team also delivers high-paced business outcomes with 100% system uptime backed by agile, nimble, simple, but cohesive Cloud architectures.

 

About the Role:

We are seeking a highly qualified Senior IT SOX Project/Program Manager to join our Bangalore team. As a newly public company going through our 1st IT SOX audit, this position is critical to ensuring the integrity of our financial reporting controls.

The successful candidate will possess extensive knowledge of SOX regulations, IT controls, and a proven track record in managing complex compliance projects. Responsibilities include identifying and remediating audit findings.

This individual will serve as the primary liaison between internal and external auditors, as well as IT and business teams. Effective communication and coordination across various systems are essential to maintain compliance with regulatory standards and operational efficiency.

What You’ll Do:

  • IT SOX Program Leadership & Management:
  • Lead the planning, execution, and successful delivery of all IT SOX compliance programs and projects, ensuring timely completion and adherence to regulatory requirements.
  • Develop, maintain, and enhance the IT SOX control framework, including IT General Controls (ITGCs) and IT Dependent Controls (ITDCs) related to various business applications and infrastructure.
  • Oversee the end-to-end IT SOX compliance lifecycle, from risk assessment and control design to testing, remediation, and reporting.
  • Ensure all IT processes and systems, including new implementations and changes, are compliant with SOX requirements.
  • Audit Management & Partnership:
  • Serve as the primary point of contact and collaborate extensively with internal and external auditors for all IT SOX audits.
  • Coordinate auditor requests, facilitate walkthroughs, provide requested evidence, and address audit findings efficiently and effectively.
  • Manage and track the remediation of identified control deficiencies, ensuring timely closure and sustainable solutions.
  • Cross-Functional IT & Business Partnership:
  • Build strong, collaborative partnerships with key IT teams including, but not limited to S&M (Salesforce, Copado), HR & Payroll (Workday), Finance and Accounting (NetSuite), Procurement (Coupa), Sales Commission (Xactly), Expense (Chromeriver), Enterprise Engineering (Mulesoft, OKTA, GitHub, FastPath, SailPoint), Data (Riversand), Infrastructure (GCP), CircleCI etc.
  • Partner with these teams to understand their processes, identify control points, ensure control effectiveness, and support their compliance needs.
  • Collaborate with business process owners to ensure IT controls are integrated and aligned with business processes.
  • Demand Management & Prioritization (SOX Focus):
  • Assist with the intake, analysis, and prioritization of IT SOX-related demands and initiatives, ensuring critical compliance efforts are appropriately resourced and prioritized.
  • Drive the integration of SOX requirements into project lifecycles for new system implementations and significant changes.
  • Project & Program Execution Excellence:
  • Drive end-to-end program and underlying project execution for IT SOX initiatives, including detailed planning, resource allocation, scheduling, budgeting, and quality assurance.
  • Implement and champion best practices in project and program management methodologies (Agile, Waterfall, Hybrid) tailored to SOX compliance needs.
  • Oversee comprehensive program rollout strategies for new compliance frameworks or tool implementations, ensuring smooth deployment and adoption across all constituent projects.
  • IT Service Delivery & Operations Improvement (SOX Context):
  • Assist with IT Help Desk service delivery improvement initiatives from a SOX compliance perspective, ensuring processes for user access, incident management, and change management are auditable and effective.
  • Monitor and enhance operational controls related to endpoint management, patching, MDM, and VDI from a SOX standpoint.
  • Risk Management & Continuous Monitoring:
  • Proactively identify, assess, and mitigate IT SOX risks, developing effective remediation plans.
  • Implement continuous monitoring mechanisms for key IT controls to ensure ongoing compliance.
  • IT Communication (SOX Specific):
  • Develop and execute strategic IT communication plans specifically tailored to SOX compliance, keeping all relevant stakeholders informed of requirements, changes, and audit outcomes.

 

Experience You’ll Need:

  • Bachelor's degree in Information Technology, Computer Science, Finance, Business Administration, or a related field.
  • 10+ years of progressive experience in IT, with at least 5+ years in a dedicated IT SOX compliance, IT Audit, or IT Program/Project Management role focused on SOX.
  • Deep expertise and practical experience in IT General Controls (ITGCs) and IT Dependent Controls (ITDCs).
  • Proven experience managing projects and programs within a Corporate IT environment, specifically related to SOX compliance, including exposure to the listed technologies (e.g., Salesforce, Workday, NetSuite, Mulesoft, OKTA, GCP).
  • Strong understanding of SOX legislation and compliance frameworks.
  • Demonstrated expertise in various project and program management methodologies (Agile, Waterfall, Hybrid approaches).
  • Strong understanding of IT service management (ITSM) frameworks (e.g., ITIL).
  • Exceptional communication (written and verbal), interpersonal, and presentation skills, with a proven ability to interact effectively with auditors, technical teams, and senior leadership.
  • Proven ability to lead, motivate, and influence cross-functional teams and stakeholders at all levels.
  • Strong analytical, problem-solving, and decision-making capabilities.
  • Experience working in a global organization and with geographically distributed teams.

Nice To Have:

  • Master's degree (e.g., MBA, MS in Project Management, Information Systems).
  • Certifications such as CISA (Certified Information Systems Auditor), PMP (Project Management Professional), PgMP (Program Management Professional), CRISC (Certified in Risk and Information Systems Control), or ITIL Foundation/Intermediate.
  • Experience with GRC (Governance, Risk, and Compliance) tools and audit management software.
  • Prior experience in process improvement methodologies (e.g., Lean Six Sigma).
  • Familiarity with the specific business operations and challenges within the Bangalore region.

Why Join Us?

This is a unique opportunity to play a pivotal role in strengthening our organization's IT SOX compliance posture. You will leverage your expertise to build robust control environments, collaborate with diverse teams, and contribute directly to the company's financial integrity and operational excellence. We offer a challenging yet rewarding environment, opportunities for continuous learning, and the chance to make a significant impact.

Join Us in Securing the World's Data

Rubrik (NYSE: RBRK) is on a mission to secure the world’s data. With Zero Trust Data Security™, we help organizations achieve business resilience against cyberattacks, malicious insiders, and operational disruptions. Rubrik Security Cloud, powered by machine learning, secures data across enterprise, cloud, and SaaS applications. We help organizations uphold data integrity, deliver data availability that withstands adverse conditions, continuously monitor data risks and threats, and restore businesses with their data when infrastructure is attacked.

Linkedin | X (formerly Twitter) | Instagram | Rubrik.com

Inclusion @ Rubrik

At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.

Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.

Our inclusion strategy focuses on three core areas of our business and culture:

  • Our Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.

  • Our Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.

  • Our Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.

Equal Opportunity Employer/Veterans/Disabled

Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. 

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.

EEO IS THE LAW

NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Apply For This Job

* Required

See Rubrik’s Candidate Privacy Notice here.

NONDISCLOSURE AGREEMENT

In consideration of any disclosure of certain nonpublic or confidential information, you hereby enter into this Nondisclosure Agreement (the “Agreement”) and agree as follows:

  1. Confidential Information. In connection with a potential business relationship or other business purposes, Rubrik, Inc. (the “Company”) has granted you (the individual or entity named below) access, or may grant you access, to business, technical or other nonpublic information, materials and/or ideas (“Confidential Information,” which term shall include, without limitation, anything you learn or discover as a result of exposure to or analysis of any Confidential Information).
  2. Obligations. You will hold in confidence and will not possess or use (except as required to evaluate the proposed business relationship) or disclose any Confidential Information except information you can document which (i) is in the public domain through no fault of yours, (ii) was properly known to you, without restriction, prior to disclosure by Company or (iii) was properly disclosed to you by another person without restriction. You will not reverse engineer or attempt to derive the composition or underlying information, structure or ideas of any Confidential Information.  You will not export, re-export, resell, ship or divert or cause to be exported, re-exported, resold, shipped or diverted, directly or indirectly, any Confidential Information or product thereof.  You will promptly notify Company of any unauthorized release, disclosure or use of Confidential   You will strictly abide by any and all instructions and restrictions provided by Company from time to time with respect to Confidential Information or Company systems. You will ensure the security of any facilities, machines, accounts, passwords and methods you use to store any Confidential Information or to access Company systems and ensure that no other person has or obtains access thereto.
  3. Return of Information.  If you decide not to proceed with the potential business relationship or if asked by Company, you will promptly return all Confidential Information and all copies, extracts and other objects or items in which Confidential Information may be contained or embodied. 
  4. No License.  This Agreement does not grant a license to you in or to any of the Confidential Information.
  5. Feedback.  You may, at your option and in your sole discretion, provide suggestions or feedback related to the Company’s products or services.  In no event will such suggestions or feedback be considered confidential or proprietary to you.  The Company will be free to use such suggestions as it chooses, without compensation to you.
  6. Disclaimer. Confidential Information is provided to you “as is” and the Company makes no warranties with respect to the Confidential Information or any materials provided by the Company.  In no event will the Company be liable for the accuracy or completeness of the Confidential Information.  You understand that nothing herein (i) requires the disclosure of any Confidential Information of the Company or (ii) requires the Company to proceed with any transaction or relationship.  You understand that this Agreement does not obligate the Company to disclose any information or negotiate or enter into any agreement or relationship.
  7. Miscellaneous.  The terms of this Agreement will remain in effect with respect to any particular Confidential Information until you can document that such Confidential Information falls into one of the exceptions stated in Section 2 above.  You acknowledge and agree that due to the unique nature of the Confidential Information, any breach of this Agreement would cause irreparable harm to Company for which damages are not an adequate remedy, and that Company shall therefore be entitled to equitable relief in addition to all other remedies available at law.  This Agreement is personal to you, nonassignable by you, governed by the internal laws of the State of California and may be modified or waived only in writing signed by both parties.  If any provision of this Agreement is found to be unenforceable, such provision will be limited or deleted to the minimum extent necessary so that the remaining terms remain in full force and effect.  The prevailing party in any dispute or legal action regarding the subject matter of this Agreement shall be entitled to recover attorneys’ fees and costs.
Type your full name in the box below to acknowledge your agreement to the above NDA

Please share the name of the company or N/A if currently unemployed. 

Please view our Candidate Privacy Notice here.