Enterprise Security GRC Lead — Trust & Compliance

Profound; New York (NY); On-site; USD 150,000 - 240,000; Full time

Job summary

Profound is seeking a Security GRC Specialist to take charge of security and compliance programs in New York City. This role involves managing compliance frameworks like SOC 2 and ISO 27001, driving audits, and collaborating with engineering to design security controls. Candidates should have 3 to 7+ years in security GRC fields, experience with cloud environments, and strong communication skills. The expected salary range is $150,000 to $240,000, with a comprehensive compensation package.

Qualifications

• 3 to 7+ years in security GRC, compliance, or adjacent security engineering roles.
• Experience with SOC 2, ISO 27001, or similar frameworks.
• Comfortable working with engineers and reasoning about cloud infrastructure.

Responsibilities

• Own and operate compliance frameworks like SOC 2, ISO 27001, GDPR.
• Drive audits end to end, from readiness to evidence collection.
• Develop and maintain trust center and customer-facing documentation.

Skills

3 to 7+ years in security GRC

Hands-on experience with SOC 2

Experience supporting audits

Proficient in cloud infrastructure

Strong written communication

Tools

AWS

GCP

Azure

Job description

Profound is seeking a Security GRC Specialist to take charge of security and compliance programs in New York City. This role involves managing compliance frameworks like SOC 2 and ISO 27001, driving audits, and collaborating with engineering to design security controls. Candidates should have 3 to 7+ years in security GRC fields, experience with cloud environments, and strong communication skills. The expected salary range is $150,000 to $240,000, with a comprehensive compensation package.