Chief Security & IT Leader for Enterprise SaaS

Profound; New York (NY); On-site; USD 300,000 - 375,000; Full time

Job summary

Profound, based in New York City, is seeking a Head of Security to build and lead a scalable security program while remaining hands-on. You will own security strategy end-to-end, drive enterprise readiness, and oversee IT operations to keep the company running securely.

You will partner with leadership to guide incident response, threat modeling, and security reviews, and you will advance SOC 2 Type II, ISO 27001, GDPR compliance as demands from enterprise customers grow.

Qualifications

• 8+ years in security with progressively expanding scope and ownership
• Hands-on technical depth in application security, cloud security, and incident response
• Direct experience owning SOC 2 Type II and driving compliance programs (ISO 27001, GDPR, etc.)

Responsibilities

• Define and evolve the company’s security strategy, roadmap, and risk posture as Profound scales
• Build out and grow the security function and team
• Serve as executive owner of security in customer conversations, RFPs, and security reviews with enterprise prospects
• Partner with Engineering, Product, and Leadership to embed security into the SDLC and product roadmap
• Own and mature governance, risk, and compliance activities including audits and vendor risk management
• Provide technical direction for security tooling, incident response, and secure architecture
• Oversee IT operations, IAM, endpoint security, and SaaS security posture

Skills

years in security

hands-on depth

SOC 2 Type II

security program leadership

enterprise security

communication with executives

Tools

SIEM

EDR

Cloud security tooling

Job description

Profound, based in New York City, is seeking a Head of Security to build and lead a scalable security program while remaining hands-on. You will own security strategy end-to-end, drive enterprise readiness, and oversee IT operations to keep the company running securely.

You will partner with leadership to guide incident response, threat modeling, and security reviews, and you will advance SOC 2 Type II, ISO 27001, GDPR compliance as demands from enterprise customers grow.