Information Security Analyst

Profound is the marketing platform for the AI era. As people increasingly turn to ChatGPT, Perplexity, and Gemini to decide what to buy, we give brands the intelligence to see how AI represents them and the Agents to act on it. Today, ~13% of the Fortune 500, plus companies like Ramp, Figma, Chime, Calendly, and DocuSign, use Profound to turn AI Search from a black box into a measurable growth channel.

Backed by Lightspeed, Sequoia, Kleiner Perkins, and Khosla Ventures at a $1B valuation, we're a lean, fast-moving team across NYC, SF, Buenos Aires, and London, shipping at a relentless pace and defining a new category at the biggest shift in marketing in 25 years. If you want to do the best work of your career at the frontier of AI, come build it with us.

What You’ll Do

• Own inbound customer security reviews from start to finish: complete security questionnaires and respond to RFPs and RFIs accurately and within the timelines our sales cycles demand
• Act as the security point of contact during the sales process, working alongside the sales team to unblock deals and answer prospective customers’ security and privacy questions directly and credibly
• Build and maintain reusable answer libraries and templates so each customer’s security review goes faster than the last
• Build and improve AI-assisted workflows that cut the manual effort on each questionnaire and audit, so the function scales as our volume grows
• Answer buyers' AI-trust questions (training-data handling/retention, subprocessors, data residency, our stance on ISO/IEC 42001, the EU AI Act, and NIST AI RMF), and flag the right internal owner when something's outside your call
• Flag recurring themes in customer questions, objections, and new requirements, and collaborate with Information Security, Product, and Legal to eliminate gaps and duplicate effort
• Help shape the function from the ground up: design the processes, workflows, and standards that the team will need to operate globally

Who You Are

• 1+ years of experience conducting customer-facing information security work or you come from a solutions engineering or sales engineering background
• You are able to translate technical security and AI-governance controls into clear, customer-facing responses, exercising sound judgment about when to answer directly, when to add a caveat, and when to escalate
• You can hold your own on calls when a prospect's security team challenges our answers, thinking on your feet while keeping the deal moving
• You have real fluency in security and compliance. You're comfortable across frameworks like ISO 27001, ISO 42001, SOC 2, GDPR, and CCP
• You are an avid user of AI tools. You already reach for AI in your daily work and are excited to use it to make security reviews faster and more consistent
• You bring a customer-first mindset, sharp organization, and close attention to detail, even under tight deadlines

It is a plus if you also have experience with:

• Contract negotiation across DPAs, MSAs, security exhibits, subprocessor agreements, BAAs, and SLAs
• Working with procurement and/or legal teams
• Vendor risk management. We are a vendor, and most of our customers run vendor risk assessments on us, so understanding both sides of that process goes a long way

Location

This is an on-site role based in our Buenos Aires office, designed for builders who thrive on speed, iteration, and meaningful impact.

For this role, the expected base salary range is $50,000 to $70,000, depending on experience. Profound's total compensation package includes base salary, equity, and a full range of benefits and perks. Final compensation will depend on factors such as your skills, experience, qualifications, and location, and will be determined during the interview process. Our recruiting team will share more details about the full compensation package and benefits as you move through hiring.

Note: All official communication from Profound will come from a @tryprofound.com email address. If you're contacted by anyone using a different domain, please disregard and report it as spam.