{"id":15595,"url":"https://alion.io/job/profound-security-grc-specialist","title":"Member of Technical Staff, GRC Director","company":{"id":4789,"name":"Profound","domain":"tryprofound.com","url":"https://alion.io/company/profound","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":67,"ghost_share":0.179,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":127,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":230000,"max":275000,"currency":"USD","period":"year","gross":null,"usd_annual":275000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Figma","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-05-05T22:30:32Z","employer_posted_date":"2026-09-11","last_verified_at":"2026-10-18T01:39:46Z","board_verified":true,"closed_at":null,"days_open":165,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":164},"description":"Profound is the fastest-growing AI marketing platform, used by 15% of the Fortune 500 including Comcast, Estée Lauder, and Walmart, and innovators like Ramp, MongoDB, and Figma. It is where marketing teams do the work: research, briefs, content, campaigns, reporting, all in one place, alongside agents that carry the load with them.\nBuilt on 2B+ real user prompts and growing, Profound’s data shows you what people ask AI and what the models say back. Profound's AI Marketer joins that data with deep context about our customers to find the opportunities worth acting on, and then puts agents to work: automating reporting, drafting content, auditing pages for readability, running competitive research. It measures what works and gets better every day.\nWe are hiring a GRC Director to own and scale our security and compliance programs while working closely with engineering, sales, and customer success.\nProfound sells to enterprises with serious security expectations, and our GRC function is central to closing deals, sustaining customer trust, and meeting the regulatory bar for the markets we operate in. This is not a \"watch the dashboard and file the report\" role. You'll shape how we build secure systems, push remediation through with engineering, and make sure compliance accelerates the business rather than slowing it down.\nWhat you'll do\nOwn and operate our compliance frameworks: SOC 2, ISO 27001, GDPR, and others as we grow\n\nDrive audits end to end: readiness, evidence collection, auditor coordination\n\nContinuously improve controls and reduce compliance overhead through automation\n\nPartner with Sales and Customer Success to unblock deals and build trust with security teams at Fortune 500 customers\n\nDevelop and maintain our trust center, security whitepapers, and customer-facing documentation\n\nWork directly with engineering to design and implement practical security controls across our cloud infrastructure, data pipelines, and customer-facing surfaces\n\nPartner on identity and access work (SSO, SAML, SCIM, IdP integrations) where security, compliance, and customer-facing requirements intersect\n\nTranslate compliance requirements into technical, scalable solutions\n\nIdentify gaps and drive remediation, not just report them\n\nRun risk assessments across systems, vendors, and processes\n\nMaintain policies and standards that are lightweight, current, and actually useful\n\nTrack and report on our security posture and compliance status to leadership\n\nImprove how we manage compliance: evidence collection, control mapping, automation\n\nEvaluate and implement GRC and security tooling where it earns its keep\n\nWho you are\n7+ years in security GRC, compliance, or adjacent security engineering roles\n\nHands-on experience with SOC 2, ISO 27001, or similar frameworks\n\nExperience supporting audits and leading customer-facing security conversations\n\nComfortable working with engineers and reasoning about cloud infrastructure, APIs, identity systems, and data flows\n\nAble to translate between compliance language and engineering reality in both directions\n\nExperience with modern cloud environments (AWS, GCP, or Azure) is a strong plus\n\nProactive and hands-on: you drive changes, you don't just track them\n\nComfortable balancing rigor with pragmatism in a fast-moving environment\n\nStrong written communication, especially with enterprise customers and cross-functional partners\n\nExperience building or scaling a GRC program from early stages\n\nFamiliarity with automation in compliance workflows\n\nBackground in security engineering, DevOps, or identity and access management\n\nLocation\nThis is an on-site role based in our NYC office, designed for builders who thrive on speed, iteration, and meaningful impact.\nFor this role, the expected base salary range is $230,000 to $275,000, depending on experience. Profound's total compensation package includes base salary, equity, and a full range of benefits and perks. Final compensation will depend on factors such as your skills, experience, qualifications, and location, and will be determined during the interview process. Our recruiting team will share more details about the full compensation package and benefits as you move through hiring.\nNote: All official communication from Profound will come from a @tryprofound.com email address. If you're contacted by anyone using a different domain, please disregard and report it as spam.","description_format":"text","description_chars":4405,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Search Engine Optimization (SEO)","Marketing & Sales AI","Social Media Analytics & Listening"],"lifecycle":[{"event":"open","at":"2026-05-05T22:30:32Z"}],"visa":[],"liveness":{"score":33,"band":"fade","label":"Fading","p_open":1,"p_active":0.739,"p_room":0.44,"age_days":164,"expected_fill_days":127,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":275000,"is_top_pay":true},"html_url":"https://alion.io/job/profound-security-grc-specialist","json_url":"https://alion.io/job/profound-security-grc-specialist.json","meta":{"generated_at":"2026-10-18T04:51:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7316,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4789},"rest":"https://alion.io/mcp/rest/get_company?id=4789"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprofound-security-grc-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprofound-security-grc-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprofound-security-grc-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/profound-security-grc-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprofound-security-grc-specialist"}]}