Member of Technical Staff, GRC Director
New York, New York$230k - $275kFull-timePosted 5mo ago
About the role
GRC Director to own and scale Profound's security and compliance programs, working with engineering, sales, and customer success to meet enterprise security expectations, drive audits, and implement practical security controls across cloud infrastructure and data pipelines.
Responsibilities
- Own and operate our compliance frameworks: SOC 2, ISO 27001, GDPR, and others as we grow
- Drive audits end to end: readiness, evidence collection, auditor coordination
- Continuously improve controls and reduce compliance overhead through automation
- Partner with Sales and Customer Success to unblock deals and build trust with security teams at Fortune 500 customers
- Develop and maintain our trust center, security whitepapers, and customer-facing documentation
- Work directly with engineering to design and implement practical security controls across our cloud infrastructure, data pipelines, and customer-facing surfaces
- Partner on identity and access work (SSO, SAML, SCIM, IdP integrations) where security, compliance, and customer-facing requirements intersect
- Translate compliance requirements into technical, scalable solutions
- Identify gaps and drive remediation, not just report them
- Run risk assessments across systems, vendors, and processes
- Maintain policies and standards that are lightweight, current, and actually useful
- Track and report on our security posture and compliance status to leadership
- Improve how we manage compliance: evidence collection, control mapping, automation
- Evaluate and implement GRC and security tooling where it earns its keep
Qualifications
- 7+ years in security GRC, compliance, or adjacent security engineering roles
- Hands-on experience with SOC 2, ISO 27001, or similar frameworks
- Experience supporting audits and leading customer-facing security conversations
- Comfortable working with engineers and reasoning about cloud infrastructure, APIs, identity systems, and data flows
- Able to translate between compliance language and engineering reality in both directions
- Experience with modern cloud environments (AWS, GCP, or Azure) is a strong plus
- Proactive and hands-on: you drive changes, you don't just track them
- Comfortable balancing rigor with pragmatism in a fast-moving environment
- Strong written communication, especially with enterprise customers and cross-functional partners
- Experience building or scaling a GRC program from early stages
- Familiarity with automation in compliance workflows
- Background in security engineering, DevOps, or identity and access management
Skills
Required:GRC program developmentSOC 2ISO 27001AuditsCloud security
Benefits
- Base salary and equity
- Full range of benefits and perks
- Compensation package details to be discussed during interview
Last updated Oct 21, 2026. Interested? Apply on the company site.
About Profound
Optimize Your Brand's Visibility in AI Search
Profound helps brands gain visibility in AI-generated answers, optimize their presence in LLM-based answer engines, and stay competitive in the zero-click world.
AI VisibilityAnswer Engine OptimizationGenerative SEOAI Search OptimizationLLM optimization
More open roles at Profound
- G&A Recruiter4d agoNew York, New York, San Francisco, California · Recruiting
- Member of Technical Staff, Engineering Manager4d agoNew York, New York · Engineering
- Manager, Forward Deployed Marketing Engineers1w agoNew York, New York, San Francisco, California +1 more · Customer Success
- Head of Design1w agoNew York, New York · Design
- GTM Enablement Program Manager1w agoNew York, New York · Sales