Director, Enterprise Risk Management – IT SOX Risk Advisory

Job not on LinkedIn

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $209.4k - $335k / year

⏰ Full Time

🔴 Lead

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HubSpot

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2006

🤝 B2B

☁️ SaaS

📣 Marketing

B2B • SaaS • Marketing

HubSpot is an AI-powered customer platform that combines marketing, sales, and customer service software into one integrated suite. With over 238,000 customers in 135 countries, HubSpot offers tools for marketing automation, sales management, customer service, content marketing, operations, and B2B commerce. With products like Marketing Hub, Sales Hub, Service Hub, and Content Hub, HubSpot enables businesses to generate leads, close deals, and provide excellent customer support, all while using AI to enhance operations and insights. The platform is designed to unify teams and customer data, supporting both small startups and large enterprises in their growth journey.

📋 Description

• Lead execution of the enterprise risk assessment, including surveys, interviews, and cross-functional facilitation. • Maintain the enterprise risk register and Key Risk Indicator (KRI) reporting cadence. • Synthesize risk inputs from risk owners into executive-ready reporting and recommendations. • Track mitigation plan progress and escalate stalled items to leadership. • Monitor emerging risks, including AI, regulatory, cybersecurity, and macroeconomic trends, and integrate them into the Enterprise Risk Assessment cycle. • Partner with the Head of Risk and Internal Audit to connect Enterprise Risk Assessment outputs to the annual audit plan. • Lead the SOX Risk Advisory portfolio, including pre-implementation reviews, control design guidance, and readiness assessments. • Own director-level relationships with Finance and Engineering stakeholders across SOX-relevant system changes. • Lead implementations requiring IT audit scoping, control design, and readiness validation. • Apply IT SOX expertise to assess ITGC impacts of system migrations, API changes, and platform builds. • Partner with the IT Internal Audit team and external auditors on scoping and reliance. • Manage and develop a team of business and IT risk professionals. • Set quality standards for advisory deliverables and risk documentation. • Allocate team capacity across concurrent advisory workstreams. • Coach advisors on stakeholder management, technical writing, and control design thinking.

🎯 Requirements

• 10+ years of experience across IT audit, risk, or advisory. • Bachelor's degree or equivalent experience in Information Systems, Accounting Information Systems, Management Information Systems, Computer Science, or a related field. • Experience facilitating Enterprise Risk Management processes, including leading risk assessments, synthesizing outputs, and presenting findings to leadership. • Deep IT SOX experience, including ITGC design, operating effectiveness testing, deficiency assessment, and external auditor coordination. • Hands-on experience supporting SOX readiness for new systems, ERP implementations, or product features in a technology or SaaS environment. • Track record of managing or mentoring teams in a high-volume, multi-stakeholder environment. • Ability to translate technical IT and SOX observations into business risk language for non-technical executive audiences. • Strong control design expertise and ability to advise Engineering and Finance stakeholders before implementation. • Comfortable managing ambiguity across concurrent, fast-moving workstreams. • Collaborative approach with Engineering, Finance, Legal, and Product stakeholders while maintaining appropriate independence. • Executive presence and ability to deliver leadership updates on risk and advisory themes. • CISA, CIA, or additional professional certifications related to risk management, governance, or internal audit are nice-to-have qualifications, not required.

🏖️ Benefits

• Annual bonus targets under HubSpot’s bonus plan for eligible roles • Equity plan eligibility to receive restricted stock units (RSUs) for some roles • Overtime pay eligibility for some roles • Benefits and perks to help employees grow better • Flexible work arrangements • In-person team and peer connection opportunities • Disability accommodations and alternative travel arrangements