Senior Third Party Risk & Controls Specialist

HubSpot is seeking a Senior Third Party Risk & Integration Security Engineer t o join our expanding IAM, Third Party Risk Management, and Enterprise Application Management team. This role is based on the idea of "external party security" and combines technical security assessment expertise in vendor risk management, focusing on evaluating third-party applications, emerging AI technologies, and integration security. The ideal candidate will conduct technical assessments of vendor security controls while also supporting broader software management and identity and access management initiatives across the organization.

This role is remote; candidates must be based in the Eastern Time Zone (ET).

What you'll do

Third-Party Risk Assessment (Primary Focus - 60%)

• Conduct technical security assessments of third-party applications, vendors, and service providers beyond traditional questionnaire-based reviews
• Evaluate API security, authentication mechanisms, data flows, and integration architectures for vendor solutions
• Assess generative AI vulnerabilities in third-party applications, including model security, data privacy, and information disclosure risks
• Perform security reviews of Model Context Protocol (MCP) servers and implementations
• Review vendor security documentation, architecture diagrams, and technical controls
• Identify security gaps and provide risk-based recommendations and guardrails to stakeholders
• Collaborate with procurement, legal, and business teams on vendor onboarding and ongoing monitoring requirements.

IAM & Enterprise Application Management (40%)

• Support Shadow IT discovery and risk assessment initiatives using enterprise tooling
• Evaluate security risks associated with unsanctioned applications and browser extensions
• Assist with managing and reducing risk relating to non-human identity (NHI) including service accounts and API keys.
• Assess access control implementations across enterprise applications and also members of HubSpot's global contractor base.
• Review OAuth grants, SAML configurations, and application integrations for security risks
• Support identity governance initiatives and access certification processes
• Collaborate and support the enterprise application management team on shared security initiatives

What we're looking for

• 5+ years of experience in application security, vendor risk management, cloud security, and/or related field
• Experience with security frameworks (NIST CSF, ISO 27001, SOC 2, etc.)
• Strong understanding of API security (REST, GraphQL, authentication/authorization)
• Strong understanding of IAM principles (RBAC, ABAC, least privilege) and modern authentication protocols (OAuth 2.0, SAML)
• Experience with non-human identity management (service accounts, API tokens, certificates)
• Understanding of SaaS architectures, access controls, and integration security
• Excellent prioritization, organization, and time management skills to suit a high-volume environment.
• Understanding of LLM and generative AI security challenges and the emerging threat landscape.
• Strong project management and communication skills to support a highly cross-functional work environment.
• Working knowledge of privacy and compliance standards (GDPR, CCPA, HIPAA)
• Background in technical due diligence or managing large-scale supplier security programs (preferred)
• Certifications such as CISSP, CCSP, CISM, or CRISC are a plus

Pay & Benefits

The cash compensation below includes base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot's bonus plan for eligible roles. In addition to cash compensation, some roles are eligible to participate in HubSpot's equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are tailored to your skills, experience, qualifications, and other job-related reasons.

This resource will help guide how we recommend thinking about the range you see. Learn more about HubSpot's compensation philosophy.

Benefits are also an important piece of your total compensation package. Explore the benefits and perks HubSpot offers to help employees grow better.

At HubSpot, fair compensation practices aren't just about checking off the box for legal compliance. It's about living out our value of transparency with our employees, candidates, and community.

Annual Cash Compensation Range:

$95,600-$143,400 USD

We know the confidence gap and impostor syndrome can get in the way of meeting spectacular candidates, so please don't hesitate to apply - we'd love to hear from you.

If you need accommodations or assistance due to a disability, please reach out to us using this form.

At HubSpot, we value both flexibility and connection. Whether you're a Remote employee or work from the Office, we want you to start your journey here by building strong connections with your team and peers. If you are joining our Engineering team, you will be required to attend a regional HubSpot office for in-person onboarding. If you join our broader Product team, you'll also attend other in-person events, such as your Product Group Summit and other gatherings, to continue building on those connections.

If you require an accommodation due to travel limitations or other reasons, please inform your recruiter during the hiring process. We are committed to supporting candidates who may need alternative arrangements

Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Germany Applicants: (m/f/d) - link to HubSpot's Career Diversity page here.

India Applicants: link to HubSpot India's equal opportunity policy here.

About HubSpot

HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers.


At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow.

We're building a company where people can do their best work. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too.

Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.

Explore more:

• HubSpot Careers
• Life at HubSpot on Instagram

HubSpot may use AI to help screen or assess candidates, but all hiring decisions are always human. More information can be found here. By submitting your application, you agree that HubSpot may collect your personal data for recruiting, global organization planning, and related purposes. We may use CLEAR ID Verification during the hiring process to confirm your identity and help maintain a safe, secure, and trusted experience for all candidates. Refer to HubSpot's Recruiting Privacy Notice for details on data processing and your rights.