About the Role
HubSpot is seeking a Senior Manager, Security GRC to lead our Product SOX Compliance program. This role is responsible for ensuring new products and features launch in a compliant, audit-ready manner by embedding SOX considerations early in the product lifecycle and executing focused, high-risk control testing.
You will lead a team responsible for pre-Go-Live compliance vetting, high-risk SOX control testing, and remediation partnership with Product and Engineering. This role is critical to shifting HubSpot’s SOX posture from reactive remediation to proactive assurance.
What You’ll DoLead Product SOX Readiness- Own the SOX compliance onboarding and vetting process for new products, features, and major engineering changes.
- Review and assess control design prior to Go-Live, ensuring SOX risks are identified and addressed early.
- Partner closely with Product, Engineering, Finance, and Internal Audit to align on risk, controls, and launch readiness.
- Lead and develop a team of GRC professionals focused on product compliance onboarding and control testing.
- Set priorities, operating rhythms, and quality standards across the program.
- Coach team members on risk-based judgment, stakeholder partnership, and execution excellence.
- Oversee deep-dive testing of high-risk SOX controls, including access management, change management, and data integrity.
- Ensure testing is rigorous, repeatable, and defensible to internal and external auditors.
- Identify systemic control gaps and drive durable improvements.
- Partner with Product, Engineering, and Finance to drive timely remediation of control issues.
- Track issues through resolution and validate corrective actions.
- Serve as a key liaison for Internal and External Audit on product-related SOX matters.
- Define and track metrics for SOX readiness, control effectiveness, and remediation timelines.
- Partner with Security Automation and Engineering teams to reduce manual testing through automation and monitoring.
- Continuously evolve the program as HubSpot’s products and risk profile grow.
- 10-15+ years of experience in SOX, IT Compliance, Security GRC, ideally in a public-company SaaS environment.
- Deep hands-on experience with SOX 404 control design, testing, issue management, and audit readiness.
- Proven experience supporting product and engineering organizations.
- Demonstrated people-management experience with the ability to deliver through teams.
- Strong judgment, communication, and cross-functional influence skills.
- Experience with product-focused SOX or technology-heavy environments.
- Familiarity with SOC 1/2, ISO 27001, ISO 42001 or NIST frameworks.
- Certifications such as CISA, CRISC, CISSP, or equivalent experience.
- Big 4 IT Auditing experience.
At HubSpot, security is a core value. You’ll help protect the financial integrity and operational stability of a platform used by millions of organizations while enabling teams to innovate and move fast with confidence. If you are inspired by the challenge of securing millions of organizations in their quest to “Grow Better”, this is your opportunity!
Pay & Benefits
The cash compensation below includes base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. In addition to cash compensation, some roles are eligible to participate in HubSpot’s equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are tailored to your skills, experience, qualifications, and other job-related reasons.
This resource will help guide how we recommend thinking about the range you see. Learn more about HubSpot’s compensation philosophy.
Benefits are also an important piece of your total compensation package. Explore the benefits and perks HubSpot offers to help employees grow better.
At HubSpot, fair compensation practices aren’t just about checking off the box for legal compliance. It’s about living out our value of transparency with our employees, candidates, and community.
We know the confidence gap and impostor syndrome can get in the way of meeting spectacular candidates, so please don’t hesitate to apply — we’d love to hear from you.
If you need accommodations or assistance due to a disability, please reach out to us using this form.
At HubSpot, we value both flexibility and connection. Whether you’re a Remote employee or work from the Office, we want you to start your journey here by building strong connections with your team and peers. If you are joining our Engineering team, you will be required to attend a regional HubSpot office for in-person onboarding. If you join our broader Product team, you’ll also attend other in-person events, such as your Product Group Summit and other gatherings, to continue building on those connections.
If you require an accommodation due to travel limitations or other reasons, please inform your recruiter during the hiring process. We are committed to supporting candidates who may need alternative arrangements
Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Germany Applicants: (m/f/d) - link to HubSpot's Career Diversity page here.
India Applicants: link to HubSpot India's equal opportunity policy here.
About HubSpot
HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers.
At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow.
We’re building a company where people can do their best work. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too.
Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.
Explore more:
- HubSpot Careers
- Life at HubSpot on Instagram
HubSpot may use AI to help screen or assess candidates, but all hiring decisions are always human. More information can be found here. By submitting your application, you agree that HubSpot may collect your personal data for recruiting, global organization planning, and related purposes. Refer to HubSpot's Recruiting Privacy Notice for details on data processing and your rights.
Top Skills
Similar Jobs
What you need to know about the Colorado Tech Scene
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
