hubspotjobs
Manager, Security GRC - Compliance Onboarding & Readiness
At a Glance
- Location
- United States
- Work Regime
- remote
- Posted
- 2026-06-17T12:22:55-04:00
Key Requirements
Required Skills
Certifications
- CISA
- CISSP
- ISO
Domain Knowledge
- Engineering
- Finance
- Regulatory
- SaaS
Requirements
Required Experience & Technical Rigor
in Security GRC, IT Compliance, or IT Audit, ideally within a fast-paced, public SaaS environment.
Hands-On Player-Coach Leadership:
Strong understanding of SOX 404 control design, risk-based scoping, testing, and proactive issue management within modern engineering environments (AWS, microservices, CI/CD pipelines).
First-Principles Architect Mindset:
You have experience implementing controls that are automated, scalable, and lightweight for developers.
Compensation & Benefits
The cash compensation below includes base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. In addition to cash compensation, some roles are eligible to participate in HubSpot’s equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are tailored to your skills, experience, qualifications, and other job-related reasons.
This resource
will help guide how we recommend thinking about the range you see. Learn more about HubSpot’s
.
Responsibilities
HubSpot is seeking a Manager, Security GRC on our
Compliance Onboarding & Readiness
This role is a critical part of how HubSpot approaches trust, security, and governance.
Instead of focusing on reactive audit defense, our team acts as a proactive design and engineering partner.
We shift compliance engineering "left" to ensure our rapidly expanding product surface, including usage-based billing systems, advanced AI capabilities, and scaling infrastructure, is fundamentally secure by design and audit-ready.
Reporting directly to the Senior Manager, you will lead and mentor a dedicated team of GRC professionals, while also acting as a high-impact individual contributor (IC).
Team
Direct People Management:
Lead, develop, and mentor a talented sub-team of GRC professionals. Evolve their capabilities in risk-based judgment and technical engineering partnership.
Hands-on Execution (IC Work):
Actively lead by example. You will personally conduct high-impact control walkthroughs, draft complex process narratives, design baseline control mappings for new architectures, and directly test our most critical systems.
Stabilization & Backlog Burnout:
Guide and support the team through its immediate operational maturity phases, and partnering cross-functionally to systematically burn down the legacy issues backlog.
About the Company
HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers.
At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow.
We’re building a company
where people can do their best work
. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too.
Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.