Full-Time
Senior Program Manager
Infosec
Posted on 9/9/2025
Rubrik
1,001-5,000 employees
Cloud data management and enterprise backup
No salary listed
Bengaluru, Karnataka, India
Hybrid
Must be based in or relocate to Bangalore, India; at least 3 days on-site weekly.
 Business & Strategy (1) |
|---|
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related technical field.
- Minimum of 10 years of progressive experience in IT program or project management, with at least 5 years focused on managing complex IT security or InfoSec-related initiatives.
- Demonstrated hands-on experience leading large-scale, cross-functional security projects (e.g., enterprise-wide IAM rollouts, vulnerability remediation campaigns, or security tool deployments).
- Strong understanding of core information security domains and principles (e.g., identity management, network security, endpoint security, vulnerability management).
- Familiarity with common security frameworks (e.g., NIST, CIS, ISO 27001) and compliance requirements (e.g., SOX, SOC 2).
- Exceptional collaboration and communication skills, with a proven ability to act as a liaison and translate requirements between technical teams.
- Excellent organizational, analytical, and problem-solving abilities, particularly in complex technical environments.
- Proficiency with project and program management tools such as JIRA.
- Proficiency with collaboration and productivity suites, particularly Google Workspace (Google Docs, Sheets, Slides, Drive).
- Based in or willing to relocate to Bangalore, India.
- Minimum of 3 full days’ work from the Bangalore office.
- Program and Project Management: Oversee and manage all IT-led InfoSec programs and projects, ensuring they are delivered on time, within scope, and on budget. This includes developing detailed project plans, tracking progress, and managing changes to project scope, schedule, and costs.
- InfoSec Program Portfolio Management: Take ownership of the IT execution for a diverse portfolio of security initiatives, acting as the bridge from InfoSec's strategy to IT's implementation. Key program areas include: Identity & Access Management (IDAM): Drive projects related to single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM) across IT systems.; Vulnerability Management: Manage IT's remediation efforts for identified vulnerabilities, coordinating patching and configuration changes across infrastructure and application teams.; Security Tooling Implementation: Lead the deployment and integration of security technologies owned or managed by IT, such as endpoint detection and response (EDR), data loss prevention (DLP), and security information and event management (SIEM) agents.; IT Controls & Compliance: Manage projects to implement and audit IT controls required for compliance frameworks like SOX, ISO 27001, and SOC 2.; Security Awareness: Partner with InfoSec to execute the technical and logistical aspects of security awareness campaigns and phishing simulations within IT-managed platforms.; Stakeholder Collaboration & Liaison: Serve as the primary communication bridge between IT and InfoSec. Translate InfoSec requirements into actionable IT projects and communicate IT constraints and progress back to InfoSec. Foster a close and collaborative partnership to ensure strategic alignment.; Reporting and Metrics: Develop and maintain metrics and dashboards to report on the status, health, and performance of all IT-led InfoSec programs. Regularly communicate these metrics to leadership in both departments.; Process Optimization & Best Practices: Champion best practices in security program management. Identify opportunities for efficiency gains and continuous improvement in how IT and InfoSec work together.; Vendor Management: Oversee relationships with third-party security solution vendors, ensuring adherence to contracts, service levels, and project deliverables for IT-managed tools.
- Relevant security certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CompTIA Security+.
- Project/program management certifications like PMP, PgMP, or PRINCE2.
- Master's degree in a technical field or Business Administration.
- Experience in a high-growth technology company or SaaS environment.
- Hands-on experience with specific security technologies (e.g., Okta, SailPoint, Zscaler).
Rubrik provides data management and backup software that helps businesses protect their information across on-premises and cloud environments. The platform works by automating backup policies and integrating with services like AWS and Azure to ensure that data is stored in a format that cannot be encrypted or deleted by unauthorized users. Unlike traditional backup tools, Rubrik focuses on ransomware recovery by guaranteeing that backups remain untouched, allowing for near-instant restoration of databases and virtual machines. The company's goal is to simplify data protection while reducing the time and cost required for organizations to recover from cyberattacks.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Palo Alto, California
Founded
2014
Simplify's Take
What believers are saying
- Agent Cloud integrations with Gemini and Microsoft Defender expand addressable market into AI governance.
- AHA Preferred Provider status grants exclusive access to nearly 5,000 U.S. hospitals for growth.
- Subscription ARR reached $1.46B with 34% YoY growth; contribution margin improved to 10.3%.
What critics are saying
- CrowdStrike Falcon and Palo Alto AgentiX capture AI security market share from nascent Agent Cloud.
- Stock trades at 8.2x price-to-sales versus 3.7x industry average; $348.83M net loss unsustainable.
- Microsoft Defender partnership risks exclusion as Azure Sentinel native tools bypass Rubrik recovery entirely.
What makes Rubrik unique
- Semantic AI Governance Engine processes policy violations 5x faster than GPT-5.2 with superior accuracy.
- Unified platform combines data protection, identity recovery, and AI agent governance across hybrid clouds.
- 2,805 customers with $100K+ subscription ARR, 25% YoY growth, demonstrates enterprise traction.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Flexible Work Hours
Remote Work Options
Growth & Insights and Company News
6 month growth
↑ 0%1 year growth
↑ 0%2 year growth
↑ 0%Rubrik has been named an American Hospital Association Preferred Cybersecurity Provider, granting access to nearly 5,000 member hospitals through an exclusive Cyber Resilience Bundle. The deal offers identity recovery, Microsoft 365 protection and AI-driven services to help hospitals maintain operations during cyberattacks. The AHA endorsement strengthens Rubrik's healthcare credentials, particularly following its recent Microsoft Defender integration for identity threat detection. However, the company continues to face losses and premium valuation concerns. Rubrik's narrative projects $2.4 billion revenue and $268.7 million earnings by 2029, requiring 21.5% annual revenue growth. Cautious analysts forecast roughly 24.3% annual growth to $2.3 billion by 2029 with no profitability, citing concerns about ongoing reinvestment needs and competitive pressure limiting progress towards profitability.
Rubrik has launched Rubrik Agent Cloud (RAC), extending its platform into AI security to monitor, govern and recover AI-driven workflows. The technology addresses emerging risks from AI agents, including identity misuse and vulnerabilities, by enforcing policies and detecting threats. RAC strengthens Rubrik's land-and-expand strategy, allowing existing customers to adopt it as an additional module whilst increasing contract value. Early integrations with Microsoft Copilot and Amazon Bedrock enhance adoption potential. The Zacks Consensus Estimate projects 21.79% revenue growth for fiscal 2027. The move intensifies competition with CrowdStrike and Palo Alto Networks, both offering AI-powered security solutions. CrowdStrike's AI-native Falcon platform and Palo Alto's Prisma AIRS and AgentiX products position them as strong rivals in the AI security space.
Rubrik announced a new integration with Microsoft Defender at RSAC 2026. The partnership combines Microsoft Defender's real-time identity threat detection with Rubrik's automated identity rollback and recovery capabilities, enabling faster response to identity-based attacks. The integration allows organisations to reverse malicious identity changes and restore infrastructure in hours rather than days. "Detection is only half of the battle," said Anneka Gupta, Rubrik's Chief Product Officer. "By combining Microsoft Defender's threat detection with Rubrik Identity Resilience, we give security and IAM teams the power to move from a detected compromise to a trusted, recovered state in hours, instead of days." The announcement was made at the RSA Conference 2026.
Rubrik has launched its Semantic AI Governance Engine (SAGE), the data security industry's first AI governance engine designed to secure and control autonomous agents in real time. SAGE powers Rubrik Agent Cloud, replacing static manual oversight with intent-driven governance for enterprise AI deployment. The system uses Rubrik's custom Small Language Model to interpret the semantic meaning of policies rather than relying on keyword searches. Key features include semantic policy interpretation, adaptive policy improvement and integrated remediation through Rubrik Agent Rewind. In benchmarking tests, Rubrik's custom SLM processed messages five times faster than OpenAI's GPT-5.2 whilst achieving higher accuracy in detecting policy violations. The technology addresses the governance bottleneck currently stalling enterprise AI deployment by providing real-time command centre capabilities for agentic operations.
Microsoft and Rubrik integration delivers complete identity attack response. Microsoft Defender and Rubrik Identity Resilience create a unified detection-to-recovery offering; customers achieve trusted recovery in hours instead of days SAN FRANCISCO - March 23, 2026 - Rubrik (NYSE: RBRK), the security and AI operations company, today announced a new integration with Microsoft Defender at RSAC 2026, enabling organizations to move from identity threat detection to rapid remediation and trusted recovery. The integration connects Microsoft's real-time identity threat detection with Rubrik's automated identity rollback and recovery capabilities, helping organizations respond faster to identity-based attacks. Identity has become the primary target for modern cyberattacks. According to Rubrik Zero Labs research, 90% of IT and security leaders say identity-driven cyberattacks are their organization's top concern. Yet most security tools stop at detection, leaving organizations to manually investigate malicious changes and restore compromised identity systems. "Detection is only half of the battle," said Anneka Gupta, Chief Product Officer at Rubrik. "Organizations need the ability to quickly and surgically reverse malicious identity changes and completely restore their infrastructure. By combining Microsoft Defender's threat detection with Rubrik Identity Resilience, we give security and IAM teams the power to move from a detected compromise to a trusted, recovered state in hours, instead of days." With this integration, organizations can extend Microsoft Defender detections directly into Rubrik's identity recovery workflows, allowing teams to investigate incidents, reverse malicious identity changes, and restore trust across hybrid environments. Joint Rubrik and Microsoft Defender customers can now: * Understand attack impact faster by correlating threat alerts with identity changes. * Reverse malicious identity modifications without performing full domain restores. * Restore trusted identity states using immutable recovery points. * Maintain visibility across hybrid identity environments, including Active Directory and Entra ID. The integration builds on Rubrik's continued investment and broader vision for Identity Resilience, focused on ensuring identity systems remain trusted, available, and recoverable in the face of cyberattacks, operational disruptions, and evolving compliance requirements. Over the past 15 months, Rubrik has rapidly expanded its identity capabilities, introducing recovery for Active Directory and Entra ID, expanding protection to multi-identity provider environments including Okta, and launching Identity Resilience capabilities that help organizations investigate incidents and reverse malicious changes. The company has also expanded ecosystem integrations with leading security platforms including CrowdStrike Falcon Identity Protection and now Microsoft Defender, connecting threat detection with automated remediation and trusted recovery. For more on how Rubrik is redefining identity security, read more here. About Rubrik Rubrik (NYSE: RBRK) is the Security and AI Operations Company. The company's data security platform secures and recovers data from cyber threats and operational disruptions. Rubrik has been recognized as a Leader in the Gartner(R) Magic Quadrant(TM) for Enterprise Backup and Recovery Software Solutions for two consecutive years and is trusted by over 6,600+ customers across the globe, including world-renowned enterprises and government organizations. For more information, visit www.rubrik.com and follow @rubrikInc on X (formerly Twitter). Media Contact Meghan Fintland Head of Global PR 925.785.9192 [email protected] Press inquiries.