Information Security Program Manager

Rubrik • Palo Alto, CA

2d • Onsite

About The Position

About the team: The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties to securely protect Rubrik information. About the role: Rubrik is seeking an Information Security Program Manager to lead critical initiatives within the Customer Trust function at our HQ location in Palo Alto, CA. As a vital member of this team, you will be a driven, proactive professional responsible for executing and continuously enhancing key service areas outlined below. The ideal candidate will excel at building and maintaining strong cross-functional relationships across the organization and possess outstanding interpersonal skills to effectively manage customer-facing engagements. Success in this role requires exceptional leadership, communication, and decision-making abilities. What You’ll Do: We are looking for a highly motivated individual to join Rubrik’s front-line, customer-facing security team that plays a crucial role in supporting sales by showcasing Rubrik’s robust security posture to customers. Key responsibilities include engaging with key securitystakeholders within customer organizations to communicate Rubrik’s security strengths, facilitating customer audits, responding to security assessments, negotiating security terms in customer contracts, and addressing other customer inquiries related to Rubrik’s enterprise and product security and compliance capabilities.

Requirements

• 6+ years of work experience in the Customer Trust function within the tech industry, preferably in the cyber resilience space.
• Experience in the cyber security practice
• Experience in leading and managing customer audits is highly preferred.
• Experience reviewing and negotiating contracts as it relates to security and compliance obligations
• Ability to meet demanding timelines and SLAs, manage changing priorities and execute tasks with minimal supervision.
• Knows how to estimate work effort and incubate skill sets to achieve team goals.
• Has knowledge of common security risks, vulnerabilities, and threats and can translate these issues through triage / risk treatment conversations.
• Understanding of information security frameworks, compliance requirements, and regulations such as DORA, ISO 27001/2 (including ISO 27017 & 18), FedRAMP , SOC 2 Trust Services Criteria, CIS Top 20, PCI DSS, HIPAA, and NIST CSF / 800-53.
• Detail-oriented and able to understand the bigger picture by using your technical expertise and problem solving abilities to prioritize and manage blocking issues.
• Ability to ramp up quickly and learn new technologies with minimal lag time.
• Able to discuss issues at technical and business levels with audiences of various backgrounds.

Nice To Haves

• Experience in a high growth business environment is a plus.
• SaaS and data management industry experience is a plus.
• Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P , CISSP , CCSK) is a plus.

Responsibilities

• Respond to security and compliance portions of customer assessments including RFPs in an accurate and timely fashion (i.e., within agreed upon internal SLAs).
• Lead customer-initiated audits by collaborating closely with Rubrik’s commercial compliance, engineering, product management, support, legal, and other technical operations teams.
• Build narratives and perform security reviews of new products to ensure there are accurate responses for customer assessments including RFPs.
• Be well-versed in Rubrik's products, particularly as they pertain to security and compliance features and secure SDLC practices.
• Work with Sales Operations, Field Operations, Sales, Sales Engineering, Marketing, and Engineering teams to intake requests and drive improvements to the customer trust process.
• Support the finalization of security and compliance language in customer contracts.
• Execute operational activities related to the maturity and measurement of the customer trust process to provide high quality services that enable sales at Rubrik.
• Drive the maturity of the customer facing collateral that disseminates security and compliance related announcements and thought leadership to new customers and prospects.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees