I was able to get my backup working (among other things for iThemes Security) by creating the folder as described by @robwakeman above.
As soon as I created the folder /wp-content/uploads/ithemes-security/backups and set permission as 750, I got an email with the backup and other email updates about a blocked IP address and files that were changed.
