Security Program Manager

Oneleet Inc.

Job Overview

Location

United States

Job Type

Full-time

Full Job Description

📋 Description

• We are seeking a Security Program Manager to join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.
• As a Security Program Manager, you will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, and work with clients to implement recommendations.
• You will conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements, and overall objectives.
• Provide guidance and recommendations for improving client security posture.
• Develop high-level security programs consisting of technical, operational, and administrative controls based on industry frameworks and client needs.
• Collaborate with clients to customize and refine the security program to match their specific use cases.
• Communicate with clients and stakeholders to ensure smooth and efficient security program creation.
• Liaise with auditors to ensure clients' security programs align with auditors' expectations.
• Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
• Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
• Be highly technical, learn new technologies quickly, and translate security concepts into implementations.
• Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations, and software integrations.

🎯 Requirements

• 4+ years in a role involving information security, compliance, or audit (security operations, GRC, vCISO, security advisory, IT/Compliance auditing, or a security-adjacent customer success/IT support role).
• Working and broad knowledge of security best practices, major compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR, PCI), and how controls map to real infrastructure and operations.
• Technical Account Management experience, or client-facing or stakeholder-facing experience with strong project management instincts.
• Ability to understand client infrastructure and map security controls to meet compliance goals and the bigger picture of holistic security and compliance.
• Strong analytical skills to evaluate environments and determine appropriate safeguards.
• Excellent verbal and written communication skills.
• Self-driven with the ability to work independently, comfortable with ambiguity, and able to adapt approach client-by-client in a fast-moving startup environment.
• Willingness to go the extra mile to meet tight deadlines and deliver results.

🏖️ Benefits

• Comprehensive health & wellness benefits.
• 20 days PTO per year, plus 8 floating holiday.
• Remote work culture.
• Team off-sites in stunning places (Amsterdam, Italy, etc).
• Competitive compensation & equity.
• We hire globally and compensate competitively within each market using geographic pay bands.

Skills & Technologies

AWS

Azure

GCP

Docker

Remote

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AI Job Fit Analysis

Pro

See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.

Oneleet Inc.

Visit Website

About Oneleet Inc.

Oneleet provides a cybersecurity compliance automation platform that maps enterprise security controls to SOC 2, ISO 27001, HIPAA, and PCI-DSS frameworks. The software ingests evidence from cloud services, endpoint tools, and ticketing systems, continuously monitors configurations, and generates auditor-ready documentation and gap reports. Organizations use it to reduce manual work, accelerate certification timelines, and maintain ongoing compliance through automated evidence collection and remediation guidance.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.