Principal Technical Program Manager, Security

POS- 29555 About You: You’re a highly technical, execution-driven program leader who thrives working alongside security engineers and product leaders to ship meaningful security improvements at scale. You bring structure to complex, fast-moving initiatives without slowing them down, and you earn trust with engineers and senior leaders alike by understanding the work deeply enough to drive it forward. You shape platform direction, influence executive decisions, and connect security program outcomes to long-term business impact. You’re comfortable operating autonomously in ambiguous environments, know how to navigate organizational complexity, and use AI as a genuine force multiplier in your daily work. About Us: The HubSpot Security team is dedicated to helping businesses grow better by safeguarding the systems and data that power our global CRM platform. With more than 125,000 customers in over 100 countries, HubSpot’s security posture is essential to our mission and a competitive differentiator. As part of the Security Governance and Risk team, you’ll: Partner closely with security engineering teams to drive the Security Product Line’s highest-priority initiatives from planning through delivery. Operate at the intersection of security, engineering, and governance, keeping complex multi-team programs moving and unblocking what needs to get done. Shape how the Security Governance group operates at scale, building the operating rhythms, frameworks, and tooling that let security teams do their best work. Join a culture that values transparency, learning, and authenticity. In this role you will… Security Engineering Partnership (Core Focus) Serve as an embedded TPM for security engineering teams, owning program execution for the Security Product Line’s most complex and strategically important initiatives. Drive end-to-end delivery of large-scale security programs spanning detection and response, identity and access, infrastructure security, application security, and more. Partner with security engineering leads and product managers to define roadmaps, sequence work, manage dependencies to keep initiatives on track. Navigate ambiguity and organizational complexity independently, escalating the right things to the right people and clearing blockers before they become delays.Champion scalable processes and durable systems within the security organization, raising the operational bar across the product line. Own portfolio-level KPIs, building reporting that connects program delivery to customer, reliability, and business outcomes. Serve as a thought leader within the TPM function, sharing strategies,approaches, and AI enabled workflows that elevate how the whole team works. SOX Compliance for UBB (Near-Term Priority) In the near term, this role will focus on supporting SOX compliance for HubSpot’s Usage-Based Billing features. The goal is to build a streamlined, repeatable process for bringing UBB features into SOX compliance, at which point this role hands off to a more sustainable operating model and shifts fully into security engineering TPM support. Partner with FinTech and FinOps program management to coordinate SOX compliance work across Engineering, Finance, and Security, keeping the program moving and stakeholders aligned. Drive implementation of SOX-compliant technical controls, partnering closely with engineering teams to sequence the work, remove blockers, and get features across the line. Ensure UBB features are integrated into the right SOX control frameworks and that engineering teams understand compliance requirements well enough to build compliantly from the start. Build a repeatable, scalable playbook so new UBB features can be evaluated, instrumented, and brought into SOX compliance without starting from scratch each time. AI-Powered Execution Actively use AI tools (e.g., Claude, ChatGPT, or similar) to accelerate program planning, documentation, risk analysis, and stakeholder communications. Model AI-fluent working…