[Remote] Principal Technical Program Manager, Security

Note: The job is a remote job and is open to candidates in USA. HubSpot is an AI-powered customer platform that helps businesses connect marketing, sales, and service while safeguarding the systems and data powering its global CRM platform. The Principal Technical Program Manager will lead complex security engineering programs, establish scalable operating processes, manage portfolio outcomes, and coordinate near-term SOX compliance for Usage-Based Billing. The role also promotes AI-enabled program execution and partners with engineering, product, finance, and security governance stakeholders.

Responsibilities

• Serve as an embedded TPM for security engineering teams, owning program execution for the Security Product Line’s most complex and strategically important initiatives
• Drive end-to-end delivery of large-scale security programs spanning detection and response, identity and access, infrastructure security, application security, and more
• Partner with security engineering leads and product managers to define roadmaps, sequence work, manage dependencies to keep initiatives on track
• Navigate ambiguity and organizational complexity independently, escalating the right things to the right people and clearing blockers before they become delays.Champion scalable processes and durable systems within the security organization, raising the operational bar across the product line
• Own portfolio-level KPIs, building reporting that connects program delivery to customer, reliability, and business outcomes
• Serve as a thought leader within the TPM function, sharing strategies,approaches, and AI enabled workflows that elevate how the whole team works
• Partner with FinTech and FinOps program management to coordinate SOX compliance work across Engineering, Finance, and Security, keeping the program moving and stakeholders aligned
• Drive implementation of SOX-compliant technical controls, partnering closely with engineering teams to sequence the work, remove blockers, and get features across the line
• Ensure UBB features are integrated into the right SOX control frameworks and that engineering teams understand compliance requirements well enough to build compliantly from the start
• Build a repeatable, scalable playbook so new UBB features can be evaluated, instrumented, and brought into SOX compliance without starting from scratch each time
• Actively use AI tools (e.g., Claude, ChatGPT, or similar) to accelerate program planning, documentation, risk analysis, and stakeholder communications
• Model AI-fluent working habits for the team, sharing workflows and prompting strategies that multiply output quality and speed
• Identify where AI materially changes how security engineering programs are planned, executed, or measured, and translate those opportunities into program strategy and investment priorities

Skills

• 12+ years of technical program management experience, with a significant portion embedded with security or software engineering teams in a SaaS or cloud environment
• Deep enough technical fluency to earn credibility with security engineers, understand the work, and ask the right questions without needing to be a practitioner
• Experience partnering with senior security engineering leaders to shape platform direction, technical standards, and execution guardrails, and the ability to connect security program outcomes to long-term business leverage and security risk
• Hands-on experience leading security programs across domains such as detection and response, identity and access management, infrastructure security, application security, and more
• The ability to build durable operating systems: program structures, escalation paths, reporting cadences, and tooling that outlast individual initiatives
• Familiarity with compliance security frameworks and standards such as SOX, ISO 27001, NIST, SOC 2, or MITRE ATT&CK sufficient to navigate security conversations and program requirements
• Demonstrated AI fluency, with a habit of using AI tools to improve the quality, speed, and consistency of program management work. You don't just know these tools exist; you use them daily and have strong opinions on how they fit into a TPM's workflow
• Experience as a force multiplier for a TPM team, including developing methodologies, mentoring peers, and raising the bar on program quality
• Excellent written and verbal communication skills, with the ability to translate complex technical and operational topics for diverse audiences
• Hands-on experience working with security engineering teams on major platform or infrastructure security initiatives
• Familiarity with SaaS architecture and cloud infrastructure (AWS/GCP) at a depth that helps you understand security engineering trade-offs
• Certification(s) such as PMP, CISM, CISSP, or CISA
• Prior experience with Usage-Based Billing or revenue recognition controls in a SaaS context
• Hands-on experience with Asana, GitHub, or similar tools to manage large-scale security programs
• Experience integrating AI tools into security or engineering workflows, such as using LLMs for documentation, risk summarization, or program reporting

Benefits

• On-target commission for employees in eligible roles
• Annual bonus targets under HubSpot’s bonus plan for eligible roles
• Participation in HubSpot’s equity plan to receive restricted stock units (RSUs) for eligible roles
• Overtime pay for eligible roles
• Flexibility to work remotely or from the office

Company Overview

Company H1B Sponsorship