hubspotjobs

Manager, Security GRC - Compliance Onboarding & Readiness

At a Glance

Location
United States
Work Regime
remote
Posted
2026-06-17T12:22:55-04:00

Key Requirements

Required Skills

AWSCI/CDMicroservices

Certifications

  • CISA
  • CISSP
  • ISO

Domain Knowledge

  • Engineering
  • Finance
  • Regulatory
  • SaaS

Requirements

Required Experience & Technical Rigor

in Security GRC, IT Compliance, or IT Audit, ideally within a fast-paced, public SaaS environment.

Hands-On Player-Coach Leadership:

Strong understanding of SOX 404 control design, risk-based scoping, testing, and proactive issue management within modern engineering environments (AWS, microservices, CI/CD pipelines).

First-Principles Architect Mindset:

You have experience implementing controls that are automated, scalable, and lightweight for developers.

Compensation & Benefits

The cash compensation below includes base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. In addition to cash compensation, some roles are eligible to participate in HubSpot’s equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are tailored to your skills, experience, qualifications, and other job-related reasons.

This resource

will help guide how we recommend thinking about the range you see. Learn more about HubSpot’s

.

Responsibilities

HubSpot is seeking a Manager, Security GRC on our

Compliance Onboarding & Readiness

This role is a critical part of how HubSpot approaches trust, security, and governance.

Instead of focusing on reactive audit defense, our team acts as a proactive design and engineering partner.

We shift compliance engineering "left" to ensure our rapidly expanding product surface, including usage-based billing systems, advanced AI capabilities, and scaling infrastructure, is fundamentally secure by design and audit-ready.

Reporting directly to the Senior Manager, you will lead and mentor a dedicated team of GRC professionals, while also acting as a high-impact individual contributor (IC).

Team

Direct People Management:

Lead, develop, and mentor a talented sub-team of GRC professionals. Evolve their capabilities in risk-based judgment and technical engineering partnership.

Hands-on Execution (IC Work):

Actively lead by example. You will personally conduct high-impact control walkthroughs, draft complex process narratives, design baseline control mappings for new architectures, and directly test our most critical systems.

Stabilization & Backlog Burnout:

Guide and support the team through its immediate operational maturity phases, and partnering cross-functionally to systematically burn down the legacy issues backlog.

About the Company

HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers.

At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow.

We’re building a company

where people can do their best work

. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too.

Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.