Security GRC Specialist

About the Company

Profound is the marketing platform for the AI era. Backed by Lightspeed, Sequoia, Kleiner Perkins, and Khosla Ventures at a $1B valuation, we are a lean, fast-moving team defining a new category in AI-driven marketing intelligence.

Responsibilities

• Own and operate compliance frameworks including SOC 2, ISO 27001, and GDPR
• Drive end-to-end audits, including readiness, evidence collection, and auditor coordination
• Partner with Sales and Customer Success to unblock enterprise deals and build customer trust
• Work with engineering to design and implement practical security controls across cloud infrastructure and data pipelines
• Develop and maintain security whitepapers, trust centers, and customer-facing documentation
• Run risk assessments across systems, vendors, and processes
• Identify security gaps and drive technical remediation
• Evaluate and implement GRC and security tooling

Requirements

• 7+ years in security GRC, compliance, or adjacent security engineering roles
• Hands-on experience with SOC 2, ISO 27001, or similar frameworks
• Experience supporting audits and leading customer-facing security conversations
• Ability to reason about cloud infrastructure, APIs, identity systems, and data flows
• Experience with modern cloud environments (AWS, GCP, or Azure)
• Strong written communication skills for enterprise customers
• Experience building or scaling a GRC program from early stages
• Background in security engineering, DevOps, or identity and access management