Lead Compliance Analyst
About The Position
HubSpot is seeking a Lead Compliance Analyst to play a critical role in maintaining and scaling our Security Compliance program. This role focuses on ensuring internal controls and processes can grow alongside our Product and evolve to meet the rapidly changing risk landscape posed by agentic AI. You will be a senior individual contributor responsible for maintaining existing compliance requirements, including SOX, SOC 1, SOC 2, HIPAA, and PCI, while scaling our control environment to reduce manual effort, provide stronger assurance, and meet future compliance demands. This role is ideal for a seasoned GRC professional who enjoys partnering deeply with technical teams, exercising strong judgment, and owning complex compliance workstreams end-to-end.
Requirements
- Extensive demonstrated experience in IT Compliance or Security GRC, preferably in a SaaS or technology-driven environment
- Strong hands-on experience with: SOC 1 / SOC 2 or ISO 27001
- Strong hands-on experience with: Control automation or GRC engineering
- Strong hands-on experience with: Control design and readiness assessments
- Strong hands-on experience with: Issue remediation and audit support
- Familiarity with: SOX 404
- Familiarity with: HIPAA and/or PCI
- Familiarity with: ISO 42001, NIST AI RMF, AIUC-1, or other AI and agentic control frameworks
- Experience partnering with Product and Engineering teams on compliance matters
- Ability to independently own complex compliance initiatives end-to-end
- Strong written and verbal communication skills
Nice To Haves
- Comfort working in fast-paced, evolving technical environments
- Certifications such as CISA, CRISC, CISSP, or equivalent preferred
Responsibilities
- Oversee the third-party audit execution lifecycle, including evidence gathering, walkthroughs, and stakeholder management
- Lead compliance onboarding for new products, features, and major engineering changes
- Review control design and operational readiness prior to go-live
- Provide clear, actionable guidance to teams on control expectations and evidence requirements
- Lead implementation for new and evolving compliance obligations
- Work directly with Engineering, Product, and Finance partners to support remediation of control gaps
- Validate corrective actions and ensure issues are fully resolved
- Track recurring issues and surface systemic risks to leadership
- Identify opportunities to reduce manual effort through better design, standardization, and automation
- Partner with Security Automation and Engineering teams to support programmatic compliance checks over time
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- Life insurance
- 401k
- Flexible scheduling
- Professional development
- Learning and development program
- Employee discount programs
- Home office stipend
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
