HubSpot

HubSpot

Manager, Security GRC - Compliance Onboarding & Readiness

Remote - USA

Sponsorship not specified$132k-$210kDetected 34 days ago
AWSCloud PlatformsCI/CDComplianceHubSpotLeadershipCommunicationMentoring

About the role

  • HubSpot is seeking a Manager, Security GRC on our Compliance Onboarding & Readiness team.
  • This role is a critical part of how HubSpot approaches trust, security, and governance.
  • This is a hands-on, "player-coach" role.

Responsibilities

  • Be an Active Player-Coach & Lead the Team
  • Direct People Management: Lead, develop, and mentor a talented sub-team of GRC professionals. Evolve their capabilities in risk-based judgment and technical engineering partnership.
  • Hands-on Execution (IC Work): Actively lead by example. You will personally conduct high-impact control walkthroughs, draft complex process narratives, design baseline control mappings for new architectures, and directly test our most critical systems.
  • Stabilization & Backlog Burnout: Guide and support the team through its immediate operational maturity phases, and partnering cross-functionally to systematically burn down the legacy issues backlog.
  • Shift Compliance Left: Manage and scale our centralized compliance onboarding intake process.
  • Partner early with Product, Engineering, and FinOps during the design and architecture stages (pre-coding) to embed security and compliance controls before production release.
  • Minimize Friction: Maintain predictable, frictionless compliance paths for engineering stakeholders so compliance acts as an operational accelerator rather than a bottleneck.
  • Drive High-Risk Control Testing & Continuous Assurance
  • Execute Deep-Dive Testing: Personally lead and oversee rigorous internal testing of HubSpot's highest-risk controls, prioritizing Identity and Access Management (IAM), privileged access, data protection, change management, and AI governance.
  • Continuous Monitoring Telemetry: Partner to design and build automated dashboards, transitioning the team's evidence collection from manual spreadsheets to continuous data streams.

Requirements

  • Demonstrated experience in Security GRC, IT Compliance, or IT Audit, ideally within a fast-paced, public SaaS environment.
  • Required Experience & Technical Rigor
  • Hands-On Player-Coach Leadership: Experience managing, mentoring, or leading GRC professionals, combined with a strong desire and demonstrated ability to execute as an individual contributor.
  • Deep Control Expertise: Strong understanding of SOX 404 control design, risk-based scoping, testing, and proactive issue management within modern engineering environments (AWS, microservices, CI/CD pipelines).
  • You have experience implementing controls that are automated, scalable, and lightweight for developers.
  • Exceptional Communication & HubSpot Culture Fit: You are empathetic, remarkably clear, and direct.
  • You can explain complex regulatory "whys" to engineering leaders.
  • Familiarity with emerging technology frameworks, specifically AI governance structures (such as ISO 42001) alongside traditional frameworks (SOC 1/2, ISO 27001, NIST).
  • Experience supporting product transitions to usage-based billing or microservices-based financial data pipelines.

Nice to have

  • Preferred Experience

Compensation

  • We know the confidence gap and impostor syndrome can get in the way of meeting spectacular candidates, so please don't hesitate to apply - we'd love to hear from you.
  • At HubSpot, we value both flexibility and connection.
  • Whether you're a Remote employee or work from the Office, we want you to start your journey here by building strong connections with your team and peers.
  • If you are joining our Engineering team, you will be required to attend a regional HubSpot office for in-person onboarding.
  • If you join our broader Product team, you'll also attend other in-person events, such as your Product Group Summit and other gatherings, to continue building on those connections.
  • We are committed to supporting candidates who may need alternative arrangements

Benefits

  • Explore the benefits and perks HubSpot offers to help employees grow better.
  • Build out and monitor key control health indicators (OKIs/PKIs) to identify and remediate control degradation long before audit windows open.
  • Actively feed readiness metrics and testing signals into the broader Security Governance and Risk ecosystem to build a unified, transparent view of security health across HubSpot.
  • If you need accommodations or assistance due to a disability, please reach out to us using this form.

Company info

  • Professional certifications such as CISA, CRISC, CISSP, or equivalent experience.
  • HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service.
  • HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers.
  • At HubSpot, bold is our baseline.
  • Our employees around the globe move fast, stay cus

Equal opportunity

  • link to HubSpot India's equal opportunity policy here.
  • About HubSpot
  • If you require an accommodation due to travel limitations or other reasons, please inform your recruiter during the hiring process.
  • India Applicants: link to HubSpot India's equal opportunity policy here.
Apply directly at HubSpot →Create a free account for alerts like thisView HubSpot immigration profile

This listing is sourced directly from HubSpot's careers page and normalized into a canonical job model.