Member of Technical Staff, GRC Specalist

Profound · New York, New York$19,167–$22,917 USD/messenior

In short

▸Especialista en GRC que construye y escala programas de seguridad y cumplimiento en una startup de rápido crecimiento.
▸Trabajas directamente con ingenieros, ventas y clientes para implementar controles técnicos y cerrar contratos enterprise con fortaleza en ciberseguridad.
▸Destaca por tener un impacto directo en el éxito del negocio: el cumplimiento acelera, no ralentiza, la expansión.

Strong written communication in English, especially with enterprise customers and cross-fu

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

🎧Land the interview? Bring the copilot. Our free extension listens to the live interview and flashes 3-4-word anchors from your resume and prep — glance, connect, talk. Get the extension →

What they ask for

✓7+ años en GRC, cumplimiento o roles relacionados con seguridad
✓Experiencia comprobada con marcos como SOC 2, ISO 27001 o similares
✓Capacidad para liderar auditorías y comunicarse con equipos técnicos y clientes enterprise
✓Habilidades para traducir requisitos de cumplimiento en soluciones técnicas escalables
✓Experiencia trabajando con infraestructura en la nube (AWS, GCP o Azure)
✓Mentalidad proactiva y orientada a la acción en entornos ágiles y de alta velocidad

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

SOC 2ISO 27001GDPRAWSGCPAzureSSOSAMLSCIMIdP

Who should you write to at Profound?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

Compensation: $230K – $275K • Offers Equity. Profound is the marketing platform for the age of AI search. The way brands reach people is being rewritten — AI models like ChatGPT, Perplexity, and Google AI Mode are now the answer layer between companies and their customers. We built the platform marketers use to understand, measure, and win in that world: the analytics, intelligence, and agent automation that turn AI search from a threat into a competitive advantage. We went from 0 to a $1B valuation in 18 months. Revenue grew 100x last year. Our customers include 15% of the Fortune 500 like Walmart, Wayfair and U.S. Bank, and innovators like Ramp, MongoDB, and Figma. We are backed by Sequoia, Kleiner Perkins, LSVP, and Khosla Ventures — and we are moving fast enough that the people joining now are building the playbook everyone who comes after them will run. We are hiring a Security GRC Specialist to own and scale our security and compliance programs while working closely with engineering, sales, and customer success. Profound sells to enterprises with serious security expectations, and our GRC function is central to closing deals, sustaining customer trust, and meeting the regulatory bar for the markets we operate in. This is not a "watch the dashboard and file the report" role. You'll shape how we build secure systems, push remediation through with engineering, and make sure compliance accelerates the business rather than slowing it down. WHAT YOU'LL DO - Own and operate our compliance frameworks: SOC 2, ISO 27001, GDPR, and others as we grow - Drive audits end to end: readiness, evidence collection, auditor coordination - Continuously improve controls and reduce compliance overhead through automation - Partner with Sales and Customer Success to unblock deals and build trust with security teams at Fortune 500 customers - Develop and maintain our trust center, security whitepapers, and customer-facing documentation - Work directly with engineering to design and implement practical security controls across our cloud infrastructure, data pipelines, and customer-facing surfaces - Partner on identity and access work (SSO, SAML, SCIM, IdP integrations) where security, compliance, and customer-facing requirements intersect - Translate compliance requirements into technical, scalable solutions - Identify gaps and drive remediation, not just report them - Run risk assessments across systems, vendors, and processes - Maintain policies and standards that are lightweight, current, and actually useful - Track and report on our security posture and compliance status to leadership - Improve how we manage compliance: evidence collection, control mapping, automation - Evaluate and implement GRC and security tooling where it earns its keep WHO YOU ARE - 7+ years in security GRC, compliance, or adjacent security engineering roles - Hands-on experience with SOC 2, ISO 27001, or similar frameworks - Experience supporting audits and leading customer-facing security conversations - Comfortable working with engineers and reasoning about cloud infrastructure, APIs, identity systems, and data flows - Able to translate between compliance language and engineering reality in both directions - Experience with modern cloud environments (AWS, GCP, or Azure) is a strong plus - Proactive and hands-on: you drive changes, you don't just track them - Comfortable balancing rigor with pragmatism in a fast-moving environment - Strong written communication, especially with enterprise customers and cross-functional partners - Experience building or scaling a GRC program from early stages - Familiarity with automation in compliance workflows - Background in security engineering, DevOps, or identity and access management LOCATION This is an on-site role based in our NYC office, designed for builders who thrive on speed, iteration, and meaningful impact. For this role, the expected base salary range

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.