Specialist, Product Security Compliance

Job Overview

As a Product Security Compliance Specialist, you will support Hubbell’s product security operations, focusing on SOC 2 compliance for SaaS products while also supporting other relevant product security and regulatory frameworks as needed. You will execute internal assessments, manage evidence collection, and track remediation to maintain compliance with audit requirements and corporate policies. You will make an impact by collaborating with multiple departments and business units to reduce risk exposure and build trust with external stakeholders.

A Day In The Life

Every day at Hubbell is different and you’ll contribute in many ways. On any given day, you’ll make a difference by:

• Audit Support
  • Manage evidence collection for SOC 2 audits and other relevant product security and regulatory frameworks (e.g., ISO 27001, Cyber Resilience Act (CRA), CSA STAR) across multiple product lines.
  • Maintain documentation of controls and ensure timely updates in compliance systems.
  • Prepare responses to auditor requests and manage follow-up actions.
  • Ensure control ownership is established and communicated.
• Risk Remediation Tracking
  • Drive remediation efforts for identified vulnerabilities and compliance gaps.
  • Follow up with business owners to ensure timely completion of corrective actions.
  • Maintain dashboards and reports on remediation status for leadership review.
• Compliance Operations
  • Lead annual assessments and gap assessments.
  • Ensure alignment with supply chain compliance frameworks and policies.
  • Assist in implementing policy and procedure updates.
• Collaboration & Communication
  • Act as a liaison between product security, product teams and auditors.
  • Support audit-related discussions with external stakeholders.
  • Provide clear, concise updates on compliance status and risk posture.
  • Track and report KPIs such as control health, evidence quality, remediation SLAs, and audit readiness.
  • Promote a security-first mindset through awareness and engagement activities.

What will help you thrive in this role?

• Bachelor’s degree in Information Security, Computer Science or related field.
• 4 years of experience in compliance, IT audit or cybersecurity operations.
• Familiarity with SOC 2 principles and evidence collection processes.
• Familiarity with cloud environments and software development lifecycles (SDLC).
• Knowledge of vulnerability management and risk remediation practices.
• Proficiency with reporting tools and dashboards for compliance tracking.
• Experience managing controls, tracking evidence and compliance automation in GRC systems (e.g., Archer, ServiceNow, Drata, Vanta, OneTrust).
• Demonstrated passion for continuous learning, with a commitment to staying current on emerging technologies, methodologies, and industry best practices - including leveraging AI tools to enhance effectiveness and efficiency.