Principal Compliance Analyst

HubSpot•Boston, MA

About The Position

HubSpot is seeking a Principal IT Compliance Analyst to define and scale the internal compliance frameworks, engineering processes, and automated control patterns that enable HubSpot’s product teams to build and ship compliant-by-design and secure-by-design solutions. This role is critical to ensuring that compliance is embedded into HubSpot’s software development lifecycle, developer tooling, and platform architecture making it seamless for engineering teams to understand and meet compliance requirements. You will serve as a technical thought leader for compliance process design, control architecture, and automation strategy. You will partner closely with Engineering, Security Compliance Automation, Monitoring, Privacy, Legal, and GRC to transform compliance from a manual, audit-driven effort into a continuous, automated program anchored in engineering excellence. At Hubspot, Security is a core value, and you will play a key role in ensuring our platform stays resilient against emerging threats and our security practices are world-class. If you are inspired by the challenge of securing millions of organizations in their quest to “Grow Better”, this is your opportunity!

Requirements

12–15+ years in compliance engineering, cloud governance, secure development, or risk architecture within a large-scale SaaS environment.
Deep knowledge of compliance standards such as SOX, SOC1, SOC 2, ISO 27001/27701, NIST 800-53, PCI, GDPR, and emerging AI governance frameworks such as ISO 42001.
Significant experience embedding compliance requirements into: SDLC processes, CI/CD pipelines, cloud-native architectures, developer experience tooling, microservice/service onboarding workflows
Strong hands-on understanding of: continuous compliance monitoring, automated evidence collection and storage, policy-as-code frameworks, cloud configuration monitoring (e.g., IAM, logging, network boundaries), event-driven or API-driven control validation
Proven success collaborating with Security or Compliance Automation teams to operationalize controls at scale.
Ability to read, review, and critique architectural diagrams and service designs.
Familiarity with AWS/GCP/Azure security models, identity governance, data flows, and distributed systems.
Understanding of AI/ML governance and compliance needs (data lineage, model lifecycle controls, evaluation, provenance, auditability).
Exceptional ability to explain compliance requirements to engineers and technical constraints to compliance teams.
Proven ability to build cross-functional alignment and influence decision-making at senior levels.
Experience mentoring engineers, compliance professionals, and product teams.