POS-15422
Lead Compliance Analyst About the RoleHubSpot is seeking a Lead Compliance Analyst to play a critical role in maintaining and scaling our Security Compliance program. This role focuses on ensuring internal controls and processes can grow alongside our Product and evolve to meet the rapidly changing risk landscape posed by agentic AI.
You will be a senior individual contributor responsible for maintaining existing compliance requirements, including SOX, SOC 1, SOC 2, HIPAA, and PCI, while scaling our control environment to reduce manual effort, provide stronger assurance, and meet future compliance demands.
This role is ideal for a seasoned GRC professional who enjoys partnering deeply with technical teams, exercising strong judgment, and owning complex compliance workstreams end-to-end.
What You’ll DoAudit Execution and Onboarding- Oversee the third-party audit execution lifecycle, including evidence gathering, walkthroughs, and stakeholder management
- Lead compliance onboarding for new products, features, and major engineering changes
- Review control design and operational readiness prior to go-live
- Provide clear, actionable guidance to teams on control expectations and evidence requirements
- Lead implementation for new and evolving compliance obligations
- Work directly with Engineering, Product, and Finance partners to support remediation of control gaps
- Validate corrective actions and ensure issues are fully resolved
- Track recurring issues and surface systemic risks to leadership
- Identify opportunities to reduce manual effort through better design, standardization, and automation
- Partner with Security Automation and Engineering teams to support programmatic compliance checks over time
- Extensive demonstrated experience in IT Compliance or Security GRC, preferably in a SaaS or technology-driven environment
- Strong hands-on experience with:
- SOC 1 / SOC 2 or ISO 27001
- Control automation or GRC engineering
- Control design and readiness assessments
- Issue remediation and audit support
- Familiarity with:
- SOX 404
- HIPAA and/or PCI
- ISO 42001, NIST AI RMF, AIUC-1, or other AI and agentic control frameworks
- Experience partnering with Product and Engineering teams on compliance matters
- Ability to independently own complex compliance initiatives end-to-end
- Strong written and verbal communication skills
- Comfort working in fast-paced, evolving technical environments
- Certifications such as CISA, CRISC, CISSP, or equivalent preferred
At HubSpot, security is a core value. You’ll help protect the financial integrity and operational stability of a platform used by millions of organizations while enabling teams to innovate and move fast with confidence. If you are inspired by the challenge of securing millions of organizations in their quest to Grow Better, this is your opportunity.
Pay & Benefits
The cash compensation below includes base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. In addition to cash compensation, some roles are eligible to participate in HubSpot’s equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are tailored to your skills, experience, qualifications, and other job-related reasons.
This resource will help guide how we recommend thinking about the range you see. Learn more about HubSpot’s compensation philosophy.
Benefits are also an important piece of your total compensation package. Explore the benefits and perks HubSpot offers to help employees grow better.
At HubSpot, fair compensation practices aren’t just about checking off the box for legal compliance. It’s about living out our value of transparency with our employees, candidates, and community.
We know the confidence gap and impostor syndrome can get in the way of meeting spectacular candidates, so please don’t hesitate to apply — we’d love to hear from you.
If you need accommodations or assistance due to a disability, please reach out to us using this form.
At HubSpot, we value both flexibility and connection. Whether you’re a Remote employee or work from the Office, we want you to start your journey here by building strong connections with your team and peers. If you are joining our Engineering team, you will be required to attend a regional HubSpot office for in-person onboarding. If you join our broader Product team, you’ll also attend other in-person events, such as your Product Group Summit and other gatherings, to continue building on those connections.
If you require an accommodation due to travel limitations or other reasons, please inform your recruiter during the hiring process. We are committed to supporting candidates who may need alternative arrangements
Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Germany Applicants: (m/f/d) - link to HubSpot's Career Diversity page here.
India Applicants: link to HubSpot India's equal opportunity policy here.
About HubSpot
HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers.
At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow.
We’re building a company where people can do their best work. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too.
Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.
Explore more:
- HubSpot Careers
- Life at HubSpot on Instagram
HubSpot may use AI to help screen or assess candidates, but all hiring decisions are always human. More information can be found here. By submitting your application, you agree that HubSpot may collect your personal data for recruiting, global organization planning, and related purposes. We may use CLEAR ID Verification during the hiring process to confirm your identity and help maintain a safe, secure, and trusted experience for all candidates. Refer to HubSpot's Recruiting Privacy Notice for details on data processing and your rights.
Skills Required
- Extensive demonstrated experience in IT Compliance or Security GRC (preferably in SaaS or technology-driven environment).
- Hands-on experience with SOC 1 / SOC 2 or ISO 27001.
- Experience with control automation or GRC engineering.
- Experience in control design and readiness assessments.
- Experience with issue remediation and audit support.
- Familiarity with SOX 404.
- Familiarity with HIPAA and/or PCI.
- Familiarity with ISO 42001, NIST AI RMF, AIUC-1, or other AI and agentic control frameworks.
- Experience partnering with Product and Engineering teams on compliance matters.
- Ability to independently own complex compliance initiatives end-to-end.
- Strong written and verbal communication skills.
- Comfort working in fast-paced, evolving technical environments.
- Certifications such as CISA, CRISC, CISSP, or equivalent.
HubSpot Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about HubSpot and has not been reviewed or approved by HubSpot.
-
Equity Value & Accessibility — Equity grants like RSUs and access to an employee stock purchase plan are seen as meaningful parts of total compensation. Feedback suggests these, alongside competitive base pay, help many feel their contributions are rewarded.
-
Leave & Time Off Breadth — Flexible time off, generous parental leave, and a paid sabbatical after tenure provide substantial opportunities to rest and recharge. Feedback suggests this breadth supports a strong work-life fit.
-
Wellbeing & Lifestyle Benefits — Comprehensive wellness resources—mental health support, fitness reimbursements, and everyday conveniences like meals or stipends—enhance the overall package. Feedback suggests these perks add tangible value beyond salary.
HubSpot Insights
What We Do
HubSpot is a leading CRM platform that provides software and support to help businesses grow better. Our platform includes marketing, sales, service, and website management products that start free and scale to meet our customers’ needs at any stage of growth. Today, thousands of customers around the world use our powerful and easy-to-use tools and integrations to attract, engage, and delight customers. HubSpot was named Glassdoor’s #4 Best Place to Work in 2021, and our award-winning culture has been recognized by Great Place to Work, Comparably, Fortune, Entrepreneur, Inc., and more. We build connections, careers, and employee growth by creating a workplace that values flexibility, autonomy, and transparency. You can learn more about our commitment to creating an inclusive and diverse workplace in the HubSpot Culture Code. HubSpot is a hybrid company with employees working fully remotely, from an office, or a mix of the two. We are headquartered in Cambridge, MA with offices in Dublin, Ireland; Singapore; Sydney, Australia; Tokyo, Japan; Berlin, Germany; Paris, France; Bogotá, Colombia; Ghent, Belgium; San Francisco, CA; Portsmouth, NH; London, UK; Toronto, Canada.
