Information Security Analyst

Job description

Profound is the marketing platform for the age of AI search. The way brands reach people is being rewritten — AI models like ChatGPT, Perplexity, and Google AI Mode are now the answer layer between companies and their customers. We built the platform marketers use to understand, measure, and win in that world: the analytics, intelligence, and agent automation that turn AI search from a threat into a competitive advantage. We went from 0 to a $1B valuation in 18 months. Revenue grew 100x last year. Our customers include 15% of the Fortune 500 like Walmart, Wayfair and U.S. Bank, and innovators like Ramp, MongoDB, and Figma. We are backed by Sequoia, Kleiner Perkins, LSVP, and Khosla Ventures — and we are moving fast enough that the people joining now are building the playbook everyone who comes after them will run. What You’ll Do - Own inbound customer security reviews from start to finish: complete security questionnaires and respond to RFPs and RFIs accurately and within the timelines our sales cycles demand - Act as the security point of contact during the sales process, working alongside the sales team to unblock deals and answer prospective customers’ security and privacy questions directly and credibly - Build and maintain reusable answer libraries and templates so each customer’s security review goes faster than the last - Build and improve AI-assisted workflows that cut the manual effort on each questionnaire and audit, so the function scales as our volume grows - Answer buyers' AI-trust questions (training-data handling/retention, subprocessors, data residency, our stance on ISO/IEC 42001, the EU AI Act, and NIST AI RMF), and flag the right internal owner when something's outside your call - Flag recurring themes in customer questions, objections, and new requirements, and collaborate with Information Security, Product, and Legal to eliminate gaps and duplicate effort - Help shape the function from the ground up: design the processes, workflows, and standards that the team will need to operate globally Who You Are - 1+ years of experience conducting customer-facing information security work or you come from a solutions engineering or sales engineering background - You are able to translate technical security and AI-governance controls into clear, customer-facing responses, exercising sound judgment about when to answer directly, when to add a caveat, and when to escalate - You can hold your own on calls when a prospect's security team challenges our answers, thinking on your feet while keeping the deal moving - You have real fluency in security and compliance. You're comfortable across frameworks like ISO 27001, ISO 42001, SOC 2, GDPR, and CCP - You are an avid user of AI tools. You already reach for AI in your daily work and are excited to use it to make security reviews faster and more consistent - You bring a customer-first mindset, sharp organization, and close attention to detail, even under tight deadlines It is a plus if you also have experience with: - Contract negotiation across DPAs, MSAs, security exhibits, subprocessor agreements, BAAs, and SLAs - Working with procurement and/or legal teams - Vendor risk management. We are a vendor, and most of our customers run vendor risk assessments on us, so understanding both sides of that process goes a long way Location This is an on-site role based in our Buenos Aires office, designed for builders who thrive on speed, iteration, and meaningful impact. For this role, the expected base salary range is $50,000 to $70,000, depending on experience. Profound's total compensation package includes base salary, equity, and a full range of benefits and perks. Final compensation will depend on factors such as your skills, experience, qualifications, and location, and will be determined during the interview process. Our recruiting team will share more details about the full compensation package and benefits as you move through hiring. Note: All official communication from Profound will come from a @tryprofound.com email address. If you're contacted by anyone using a different domain, please disregard and report it as spam.