Member of Technical Staff, Head of Security
New York, New York$300k - $375kFull-timePosted 2mo ago
About the role
Head of Security leading Profound's security program and IT operations, spanning strategy, governance, technical security, and daily IT to scale an enterprise-grade security posture.
Responsibilities
- Own and evolve Profound's overall security strategy, roadmap, and risk posture as the company scales
- Own the build-out and growth of the entire security function and team.
- Serve as the executive-level owner of security in customer conversations, RFPs, and security reviews with enterprise and Fortune 100 prospects and customers
- Partner closely with Engineering, Product, and Leadership to embed security into the SDLC and product roadmap
- Own and mature Profound's compliance posture (SOC 2 Type II and beyond — e.g. ISO 27001, GDPR, and other frameworks as enterprise customers require)
- Drive audits, policy development, vendor risk management, and control operations
- Manage relationships with auditors, pen testers, and security vendors
- Provide technical direction and oversight for application security, cloud security (AWS/GCP), and infrastructure hardening
- Own incident response: build the program, run tabletop exercises, and lead the response when needed
- Guide and review the Security Engineer's work on detection, vulnerability management, and secure architecture
- Evaluate and implement security tooling (SIEM, EDR, vulnerability scanning, etc.)
- Own IT operations for the company: identity and access management (SSO/MDM), endpoint security, employee onboarding/offboarding, SaaS security posture, and internal tooling
- Set and enforce IT policies that scale with headcount growth without creating unnecessary friction
Qualifications
- 8+ years in security, with progressively increasing scope, including experience owning a security program (not just executing within one)
- Prior experience as a first or early security hire at a high-growth startup, ideally SaaS/B2B, strongly preferred
- Hands-on technical depth — comfortable engaging directly on application security, cloud security, and incident response
- Direct experience owning SOC 2 (Type II) and driving compliance programs; experience with ISO 27001, GDPR, etc. is a plus
- Experience leading and developing a small team
- Comfortable being the face of security to enterprise customers, including technical security reviews and questionnaires
- Experience owning or partnering closely with IT function preferred
- Excellent communicator who can translate technical risk into business terms for executives and customers alike
Skills
Required:Security program ownershipCompliance managementIncident responseApplication securityCloud securityLeadership / communication
Nice to have:IT operations
Benefits
- Total compensation includes base salary, equity, and a full range of benefits and perks
Last updated Oct 21, 2026. Interested? Apply on the company site.
About Profound
Optimize Your Brand's Visibility in AI Search
Profound helps brands gain visibility in AI-generated answers, optimize their presence in LLM-based answer engines, and stay competitive in the zero-click world.
AI VisibilityAnswer Engine OptimizationGenerative SEOAI Search OptimizationLLM optimization
More open roles at Profound
- G&A Recruiter4d agoNew York, New York, San Francisco, California · Recruiting
- Member of Technical Staff, Engineering Manager4d agoNew York, New York · Engineering
- Manager, Forward Deployed Marketing Engineers1w agoNew York, New York, San Francisco, California +1 more · Customer Success
- Head of Design1w agoNew York, New York · Design
- GTM Enablement Program Manager1w agoNew York, New York · Sales