← All roles

Security Program Manager

Oneleet· Security/Compliance
Apply on company site
Remote$75k - $140kFull-timePosted 11mo ago

About the role

Security Program Manager at Oneleet, combining vCISO and account management to assess clients' security/compliance frameworks, provide guidance, and implement improvements across frameworks and technologies.

Responsibilities

  • Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.
  • Provide guidance and recommendations for improving client security posture
  • Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs.
  • Collaborate with clients to customize and refine the security program to match their specific use cases.
  • Communicate with clients and stakeholders to ensure smooth and efficient security program creation
  • Liaise with auditors to ensure clients' security programs align with auditors' expectations
  • Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
  • Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
  • Be highly technical, learn new technologies quickly, and translate security concepts into implementations.
  • Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations.

Qualifications

  • 4+ years in a role involving information security, compliance, or audit (security operations, GRC, vCISO, security advisory, IT/Compliance auditing, or a security-adjacent customer success/IT support role).
  • Working and broad knowledge of security best practices, major compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR, PCI), and how controls map to real infrastructure and operations.

Skills

Required:Security program design and governanceClient/Account managementCommunicationAuditing and compliance awareness

Benefits

  • Comprehensive health & wellness benefits
  • 20 days PTO per year, plus 8 floating holiday
  • Remote work culture
  • Team off-sites in locations such as Amsterdam, Italy
  • Competitive compensation & equity
Last updated Jul 15, 2026. Interested? Apply on the company site.
Oneleet logo

About Oneleet

YC's most popular security compliance platform (SOC 2, ISO 27001,…

Oneleet helps companies become secure and compliant through an all-in-one solution that combines automated tools and human expertise. Oneleet has built the second generation of security compliance automation software, providing tools that go beyond what is classically provided for just compliance alone. Tools like a code security scanner, attack-surface management, access reviews and trust portal are all built in. As the most popular, highest rated and most frequently used platform in the YC community, Oneleet has quickly established itself as the preferred and superior alternative to other incumbents. The founder behind Oneleet has spent the past 10+ years helping companies become more secure by performing penetration tests.

artificial-intelligencesaasb2bcompliancesecurity
Company profileWebsite

More open roles at Oneleet