Information Security Analyst

Profound is the fastest-growing AI marketing platform, used by 15% of the Fortune 500 including Comcast, Estée Lauder, and Walmart, and innovators like Ramp, MongoDB, and Figma. It is where marketing teams do the work: research, briefs, content, campaigns, reporting, all in one place, alongside agents that carry the load with them.


Built on 2B+ real user prompts and growing, Profound's data shows you what people ask AI and what the models say back. Profound's AI Marketer joins that data with deep context about our customers to find the opportunities worth acting on, and then puts agents to work: automating reporting, drafting content, auditing pages for readability, running competitive research. It measures what works and gets better every day.

What You'll Do

• Own inbound customer security reviews from start to finish: complete security questionnaires and respond to RFPs and RFIs accurately and within the timelines our sales cycles demand
• Act as the security point of contact during the sales process, working alongside the sales team to unblock deals and answer prospective customers' security and privacy questions directly and credibly
• Build and maintain reusable answer libraries and templates so each customer's security review goes faster than the last
• Build and improve AI-assisted workflows that cut the manual effort on each questionnaire and audit, so the function scales as our volume grows
• Answer buyers' AI-trust questions (training-data handling/retention, subprocessors, data residency, our stance on ISO/IEC 42001, the EU AI Act, and NIST AI RMF), and flag the right internal owner when something's outside your call
• Flag recurring themes in customer questions, objections, and new requirements, and collaborate with Information Security, Product, and Legal to eliminate gaps and duplicate effort
• Help shape the function from the ground up: design the processes, workflows, and standards that the team will need to operate globally

Who You Are

• 1+ years of experience conducting customer-facing information security work or you come from a solutions engineering or sales engineering background
• You are able to translate technical security and AI-governance controls into clear, customer-facing responses, exercising sound judgment about when to answer directly, when to add a caveat, and when to escalate
• You can hold your own on calls when a prospect's security team challenges our answers, thinking on your feet while keeping the deal moving
• You have real fluency in security and compliance. You're comfortable across frameworks like ISO 27001, ISO 42001, SOC 2, GDPR, and CCP
• You are an avid user of AI tools. You already reach for AI in your daily work and are excited to use it to make security reviews faster and more consistent
• You bring a customer-first mindset, sharp organization, and close attention to detail, even under tight deadlines

It is a plus if you also have experience with:

• Contract negotiation across DPAs, MSAs, security exhibits, subprocessor agreements, BAAs, and SLAs
• Working with procurement and/or legal teams
• Vendor risk management. We are a vendor, and most of our customers run vendor risk assessments on us, so understanding both sides of that process goes a long way

Location

For US based candidates this will be Remote, and for Buenos Aires candidates this will be onsite in our Buenos Aires office, both designed for builders who thrive on speed, iteration, and meaningful impact.

For this role, the expected base salary range is $75,000 to $100,000, depending on experience. Profound's total compensation package includes base salary, equity, and a full range of benefits and perks. Final compensation will depend on factors such as your skills, experience, qualifications, and location, and will be determined during the interview process. Our recruiting team will share more details about the full compensation package and benefits as you move through hiring.

Note: All official communication from Profound will come from a @tryprofound.com email address. If you're contacted by anyone using a different domain, please disregard and report it as spam.