POS-25410

HubSpot is looking for a Cybersecurity & Customer Trust Specialist to focus on our most important asset, our customers.

Here at HubSpot, we recognize that we are stewards of the data that our customers and partners entrust us to protect, and we incorporate that trust into our philosophies and principles. Empowering our existing and prospective customers with the information needed to understand our security posture and manage their own risk is a critical offering, and we’re looking for someone who understands that value.

You will be part of the Security Enablement team at HubSpot, which supports both HubSpot and our Customers in addressing risk through internal and externally facing customer trust enablement, programming, and mature third party risk management operations.

In this role, you’ll get to:

• Act as a subject-matter-expert on HubSpot’s Security posture to internal stakeholders as well as our existing and prospective customers
• Provide white glove support and subject matter expertise for security matters during the sales cycle including assisting with RFIs/RFPs, supporting calls with customers, due diligence questionnaire support, and creating customer trust focused assets
• Contribute to how we scale the support of customer security inquiries
• Contribute to existing security documentation and knowledge base, as well as identify and advocate for the creation of new materials
• Partner closely with the Sales and Services teams to understand customer needs, reduce friction areas to build better enablement resources
• Partner closely with HubSpot’s Compliance, Legal, Privacy, and Risk teams to understand current compliance and regulatory requirements
• Partner closely with various business teams on a variety of security-related processes, risks, and opportunities as needed
• Maintain knowledge of threat landscapes, regulatory changes, and industry best practices, while understanding the implications to both the HubSpot product and our organization overall

We are looking for someone who has...

• Strong understanding of cybersecurity concepts, technology stacks and best practices. This includes application security, host protection, vulnerability management, asset and configuration management, security incident and event management, etc.
• Direct cybersecurity experience in the SaaS industry, particularly in the web application space
• Direct technical cybersecurity experience in an analyst, investigative or consulting role
• Excellent written and verbal communication skills
• Strong interest in building processes from scratch that drive scale and impact
• Strong project management skills with the ability drive projects to completion, collaborate cross-functionally, and navigate complex technical problems and landscapes
• Experience in security operations, vendor management, IT compliance, or security consulting role
• Experience with data analysis, tools like Looker
• Functional knowledge of Sarbanes-Oxley, SOC2, GDPR and CCPA
• Demonstrated success in a client or customer facing role, with an emphasis on high volumes of customer inquiries
• Experience answering RFPs, familiarity with RFP content management platforms is a plus

Even better if you:

• Have functional knowledge of data privacy concepts
• Can persuasively cross-collaborate with different teams in a rapidly changing environment
• Are familiar with the role security plays in SDLC