Lead, develop, and mentor a talented sub-team of GRC professionals.
Personally conduct high-impact control walkthroughs, draft complex process narratives, design baseline control mappings for new architectures, and directly test critical systems.
Manage and scale compliance onboarding intake process by partnering early with Product, Engineering, and FinOps.
Personally lead and oversee rigorous internal testing of HubSpot’s highest-risk controls.
Build out and monitor key control health indicators (OKIs/PKIs).
Requirements
Demonstrated experience in Security GRC, IT Compliance, or IT Audit, ideally within a fast-paced, public SaaS environment.
Hands-On Player-Coach Leadership: Experience managing, mentoring, or leading GRC professionals, combined with a strong desire and demonstrated ability to execute as an individual contributor.
Deep Control Expertise: Strong understanding of SOX 404 control design, risk-based scoping, testing, and proactive issue management within modern engineering environments (AWS, microservices, CI/CD pipelines).
First-Principles Architect Mindset: Experience implementing controls that are automated, scalable, and lightweight for developers.
Exceptional Communication & HubSpot Culture Fit: Empathetic, remarkably clear, and direct communication skills.
Tech Stack
AWS
Microservices
Benefits
Cash compensation includes base salary, on-target commission, and annual bonus targets.
Participation in HubSpot’s equity plan (RSUs) for eligible roles.