Lead Compliance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage the entire lifecycle of third-party audit execution, encompassing evidence collection, walkthroughs, and stakeholder engagement.

• Facilitate compliance onboarding for new products, features, and significant engineering modifications.

• Assess control design and operational readiness before the go-live phase.

• Offer clear and actionable guidance to teams regarding control expectations and evidence requirements.

• Spearhead the implementation of new and evolving compliance obligations.

• Collaborate directly with Engineering, Product, and Finance teams to aid in the remediation of control deficiencies.

• Verify corrective actions and ensure that issues are completely resolved.

• Monitor recurring issues and highlight systemic risks to leadership.

• Discover opportunities to minimize manual effort through improved design, standardization, and automation.

• Work alongside Security Automation and Engineering teams to maintain programmatic compliance checks over time.

⛳️ Requirements

• Extensive proven experience in IT Compliance or Security GRC, ideally within a SaaS or technology-oriented environment.

• Strong practical expertise with:

• SOC 1 / SOC 2 or ISO 27001.

• Control automation or GRC engineering.

• Control design and readiness evaluations.

• Issue remediation and audit assistance.

• Familiarity with:

• SOX 404.

• HIPAA and/or PCI.

• ISO 42001, NIST AI RMF, AIUC-1, or other AI and agentic control frameworks.

• Experience collaborating with Product and Engineering teams on compliance issues.

• Capability to independently manage complex compliance initiatives from start to finish.

• Excellent written and verbal communication abilities.

🏝️ Benefits

• Benefits are also an important piece of your total compensation package. Explore the benefits and perks HubSpot offers to help employees grow better.