{"id":3562590,"url":"https://alion.io/job/hubsync-vp-of-security-hubsync","title":"VP of Security, HubSync","company":{"id":1866145,"name":"HubSync","domain":"hubsync.com","url":"https://alion.io/company/hubsync","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":151000,"max_usd":302000,"period":"year","method":"global_role_seniority_cell","sample_n":4188},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"IAM","optional":false},{"name":"LLM","optional":false},{"name":"Sentry","optional":false},{"name":"SOC 2","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-31T02:55:35Z","employer_posted_date":null,"last_verified_at":"2026-10-31T02:55:35Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"About HubSync HubSync is an AI-native tax workflow platform for the country's largest CPA firms. Firms trust us with their clients' most sensitive financial and tax data, and security is central to how we build and run the product. We're hiring a VP of Security to lead and scale our security program as we grow. \nThe Role You'll be HubSync's senior security leader, responsible for security across our product, cloud infrastructure, corporate IT and compliance. You'll take over an established program: a dedicated AWS security and network operations partner, a 24/7 security operations center (SOC), regular external penetration testing, continuous AI-driven testing, and company-wide device security and training. You'll own and grow that program, and you'll be the security voice our enterprise customers and board rely on. \nWhat You'll Do Own HubSync's security strategy, roadmap and budget, and report on risk and progress to the CEO and the board. \n\nLead security across our multi-account AWS environment and our application platform, working with engineering as a partner. \n\nLead application security practice across the development lifecycle, including code analysis, release testing and secure design review. \n\nManage our security partners: AllCloud (AWS security and network operations), Sentry (SOC), LBMC (device security and training), and our external penetration testers. \n\nOwn detection, monitoring and incident response readiness, including playbooks and tabletop exercises. \n\nRun our compliance program (SOC 2 Type II, plus other frameworks as customers require) and lead security reviews, questionnaires and audits with enterprise CPA firm customers. \n\nSet security governance for AI features: data handling, model and vendor risk, and customer data boundaries. \n\nLead corporate and physical security for our US and offshore teams, including endpoint protection, identity, access reviews and security awareness. \n\nBuild and lead a security team over time, and take ownership of the work our vCISO covers today. \n\nWhat You Bring 10+ years in security, including 4+ years leading a security program at a B2B SaaS company that handles sensitive financial, tax or regulated data. \n\nDeep hands-on AWS security expertise, including WAF, Shield, IAM, GuardDuty, Security Hub and multi-account governance. \n\nA strong application security background, including multi-tenant SaaS architecture. \n\nExperience securing AI and LLM products, including data handling, prompt-injection defense and AI vendor risk. \n\nExperience leading SOC 2 audits and enterprise customer security reviews. \n\nA track record of getting results from SOC, managed security and penetration testing partners. \n\nIncident response leadership. \nThe ability to explain risk plainly to a board and work as a peer with engineering leaders. \n\nExperience supporting distributed teams, including offshore. \n\nNice to Have Experience in accounting, tax, fintech or professional services. \n\nCISSP, CISM, OSCP or AWS Security Specialty certification. \n\nFamiliarity with ISO 27001, IRS Publication 4557, the FTC Safeguards Rule or GLBA. \n\nYear One \nFirst 90 days: Take full ownership of the program and partners, and present your roadmap to the CEO and board. \n\nBy 6 months: Lead customer security reviews end to end and run an incident response tabletop exercise. \n\nBy 12 months: Complete a SOC 2 Type II cycle and make HubSync's security posture a competitive advantage with enterprise firms. \n\nHubSync is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.\nOriginally posted on Himalayas","description_format":"text","description_chars":3718,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Financial Services","Government"],"lifecycle":[{"event":"open","at":"2026-10-31T05:28:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":177500,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":10,"expected_fill_days":36,"reasons":["seen:10","velocity","win:early"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/hubsync-vp-of-security-hubsync","json_url":"https://alion.io/job/hubsync-vp-of-security-hubsync.json","meta":{"generated_at":"2026-11-11T02:21:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":291,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1866145},"rest":"https://alion.io/mcp/rest/get_company?id=1866145"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhubsync-vp-of-security-hubsync"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhubsync-vp-of-security-hubsync"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhubsync-vp-of-security-hubsync"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hubsync-vp-of-security-hubsync\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhubsync-vp-of-security-hubsync"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3562590}},{"tool":"search_jobs","arguments":{"company":"hubsync.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3562590},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}