Associate Security Program Manager

, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.

Who we're looking for: We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you'll fit right in. We're especially drawn to:

• Rebels with a cause - frustrated with the status quo and eager to disrupt it.

• Opinionated (but not obstinate) builders - decisive yet collaborative, who help us move fast.

• Clear communicators - who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. If you're ready to challenge the status quo and help shape the future of cybersecurity, we'd love to meet you.

Internal Audit & Controls Review (~50%)

• Review client-uploaded evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness, accuracy, and sufficiency.

• Perform QA checks on individual controls, and support final pre-audit reviews before clients engage third-party auditors.

• Identify gaps or weak evidence and write clear findings with specific, actionable fixes.

• Help maintain internal QA standards and review methodologies, and contribute to guidance documents that help clients produce better evidence.

• Track audit readiness metrics and flag opportunities to improve our process.

• Share feedback with our product and engineering teams on where the platform can better support audit readiness.

Client-Facing Security Program Support (~50%)

• Join and help run consultation calls with new clients to understand their security posture, infrastructure stack, compliance requirements, and goals.

• Support Security Program Managers in building security programs of technical, operational, and administrative controls based on industry frameworks and each client's actual environment.

• Help clients turn programs into real implementations: policies, procedures, configurations, and software integrations.

• Serve as a responsive point of contact for clients, translating security concepts for both technical and non-technical stakeholders.

• Help coordinate with auditors so client programs meet auditor expectations.

• Use what you learn in QA reviews to help clients get evidence right the first time.

Security & Compliance

• 3+ years in information security, compliance, or audit (GRC, IT or compliance auditing, security operations, security advisory, or a security-adjacent customer success or IT support role).

• Working knowledge of SOC 2, ISO 27001, HIPAA, GDPR, and PCI, and of how controls map to real infrastructure and operations.

• Familiarity with cloud and infrastructure technologies such as AWS, Azure, GCP, Kubernetes, Docker, or Terraform, and the ability to learn new ones quickly.

• Exposure to reviewing or preparing evidence for compliance audits.

Client & Execution Skills

• Client-facing or stakeholder-facing experience, with strong organization and project management instincts.

• Excellent attention to detail and a quality control mindset.

• Clear written communication for documenting findings, and confident verbal communication on client calls.

• Comfortable switching between focused review work and a high-volume, high-interruption client queue.

• Self-driven, comfortable with ambiguity, and able to manage multiple client engagements at once in a fast-moving startup environment.

• Progress toward or holding a certification such as CISA, Security+, CISSP (Associate), CISM, or ISO 27001 Lead Auditor/Implementer.

• Experience with compliance automation platforms.

• Background in customer success, IT support, or technical support.

• Startup experience, whether working at one or consulting for them.

At Oneleet, you'll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. Here's what makes us special:

• We value impact over titles, autonomy over micromanagement, and clarity over jargon.

• You'll tackle meaningful, hard problems with real-world consequences.

• You'll work with smart, kind, and ambitious teammates who lift each other up.

Perks & Benefits

• Comprehensive health & wellness benefits

• 20 days PTO per year, plus 8 floating holiday

• Remote work culture

• Team off-sites in stunning places (Amsterdam, Italy, etc).

• Competitive compensation & equity

We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits.