Senior Information Security Analyst - Data Governance

About the team:

The Information Security (InfoSec) organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.

About the role:

We are seeking an experienced and dedicated Senior Information Security Analyst to join our dynamic security and governance team. In this role, you will be responsible for performing comprehensive data governance and security reviews during the Software Development Lifecycle (SDLC) of new products and features, ensuring robust protection of sensitive information. You will manage and cultivate strong partnerships across diverse internal groups including Legal, Engineering, Product, and IT. Additionally, you will serve as a key point of contact supporting our Security Operations Center (SOC) to respond promptly to security incidents, providing your expertise on data governance and security perspectives, and helping ensure thorough implementation of organizational policies aligned with industry best practice frameworks.

The ideal candidate brings extensive experience in information security or data governance, substantial knowledge of industry standards and frameworks (such as the NIST Framework), exceptional communication abilities, and a proven capacity to effectively manage stakeholder relations.

What You’ll Do:

• • Perform timely and effective data governance and information security reviews during the Software Development Lifecycle (SDLC) for new products, services, and features.
  • Manage metadata effectively, documenting data lineage, definitions, and ownership to ensure clarity, consistency, and traceability
  • Conduct routine audits and assessments to monitor data governance adherence and to identify gaps in data management processes and controls
  • Proactively manage relationships and maintain clear communication with multiple internal stakeholders including Legal, Engineering, Product, and IT teams to facilitate compliance with data governance standards and best practices.
  • Serve as a subject matter expert and trusted partner for the Security Operations Center (SOC), providing strategic guidance, support, and collaboration on incident response activities from a data security and governance perspective.
  • Support training and awareness programs to educate employees on best data governance practices, policies, tools, and their role in maintaining the integrity and security of information
  • Participate actively in developing, updating, and maintaining documentation, policies, procedures, and guidelines related to information security and governance.
  • Identify and escalate data governance and security risks to appropriate Risk Management team and leadership along with clear, actionable recommendations.

Experience You’ll Need:

• Bachelor's or Master's degree in Information Security, Data Analytics, Management Information Science, or a related discipline.
• Minimum 3–5 years of relevant professional experience in an information security, data security, or data governance role.
• Strong technical background and practical knowledge of data security principles and standard frameworks (including experience with NIST frameworks).
• Exceptional presentation, reporting, and documentation skills.
• Excellent verbal and written communication skills, with a demonstrated ability to clearly explain complex concepts to stakeholders across different business areas and technical levels.
• Project management capabilities, including the ability to successfully lead and coordinate governance projects across functional areas and teams
• Proven capacity to adapt quickly within a dynamic business setting, maintaining professionalism under pressure.

Preferred Qualifications:

• Industry-recognized certifications is a plus (e.g., CISSP, CISM, CDPSE, Security+).
• Proficiency in data governance frameworks, models, and tools (e.g., data dictionaries, metadata management tools).
• In-depth understanding of relevant regulations (e.g., GDPR, CCPA, HIPAA) and compliance obligations
• Prior experience collaborating with or working on incident response teams within SOC environments is preferred.
• Strong analytical, critical-thinking, and problem-solving skills, particularly with complex datasets and data issues.
• Familiarity or experience implementing and managing data and information security solutions within cloud environments.