Senior Security GRC Architect — Enterprise Compliance

Slope; New York (NY); On-site; USD 230,000 - 275,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

Profound is hiring a Security GRC Specialist to own and scale our security and compliance programs, partnering with engineering, sales, and customer success. This role drives the lifecycle of audits, frameworks, and automation to accelerate deals and protect customer trust.

You will shape secure systems, push remediation with engineering, and ensure compliance accelerates the business rather than slowing it down.

Qualifications

• 7+ years in security GRC, compliance, or adjacent security engineering roles.
• Hands-on experience with SOC 2, ISO 27001, or similar frameworks.
• Experience supporting audits and leading customer-facing security conversations.
• Comfortable with cloud infrastructure, APIs, identity systems, and data flows.
• Able to translate compliance language to engineering reality in both directions.
• Experience with modern cloud environments (AWS, GCP, or Azure) is a strong plus.
• Proactive and hands-on: you drive changes, not just track them.

Responsibilities

• Own and operate our compliance frameworks: SOC 2, ISO 27001, GDPR, and others as we grow
• Drive audits end to end: readiness, evidence collection, auditor coordination
• Continuously improve controls and reduce compliance overhead through automation
• Partner with Sales and Customer Success to unblock deals and build trust with security teams at Fortune 500 customers
• Develop and maintain our trust center, security whitepapers, and customer-facing documentation
• Work with engineering to design and implement practical security controls across cloud infra, data pipelines, and surfaces
• Partner on identity and access work (SSO, SAML, SCIM, IdP integrations)
• Translate compliance requirements into technical, scalable solutions
• Identify gaps and drive remediation, not just report them
• Run risk assessments across systems, vendors, and processes
• Maintain policies and standards that are lightweight and current
• Track and report on our security posture and compliance status to leadership
• Improve how we manage compliance: evidence collection, control mapping, automation
• Evaluate and implement GRC and security tooling where it earns its keep

Skills

GRC leadership

SOC 2

ISO 27001

Audit support

Cloud security

APIs & identity systems

Data security

Security automation

Strong written comms

Vendor risk

IAM / Identity management

Job description

Profound is hiring a Security GRC Specialist to own and scale our security and compliance programs, partnering with engineering, sales, and customer success. This role drives the lifecycle of audits, frameworks, and automation to accelerate deals and protect customer trust.

You will shape secure systems, push remediation with engineering, and ensure compliance accelerates the business rather than slowing it down.