Key skills
GoAIAgenticSaaSLeadershipStakeholder ManagementCommunication
About this role
Role Overview
- Oversee the third-party audit execution lifecycle, including evidence gathering, walkthroughs, and stakeholder management
- Lead compliance onboarding for new products, features, and major engineering changes
- Review control design and operational readiness prior to go-live
- Provide clear, actionable guidance to teams on control expectations and evidence requirements
- Lead implementation for new and evolving compliance obligations
- Work directly with Engineering, Product, and Finance partners to support remediation of control gaps
- Validate corrective actions and ensure issues are fully resolved
- Track recurring issues and surface systemic risks to leadership
- Identify opportunities to reduce manual effort through better design, standardization, and automation
- Partner with Security Automation and Engineering teams to support programmatic compliance checks over time
Requirements
- Extensive demonstrated experience in IT Compliance or Security GRC, preferably in a SaaS or technology-driven environment
- Strong hands-on experience with:
- SOC 1 / SOC 2 or ISO 27001
- Control automation or GRC engineering
- Control design and readiness assessments
- Issue remediation and audit support
- Familiarity with:
- SOX 404
- HIPAA and/or PCI
- ISO 42001, NIST AI RMF, AIUC-1, or other AI and agentic control frameworks
- Experience partnering with Product and Engineering teams on compliance matters
- Ability to independently own complex compliance initiatives end-to-end
- Strong written and verbal communication skills.
Benefits
- Benefits are also an important piece of your total compensation package. Explore the benefits and perks HubSpot offers to help employees grow better.