Security Program Manager

About Oneleet

Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners.

We have just raised a $33 million Series A and are rapidly growing in both customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.

Who we’re looking for

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. We’re especially drawn to: Rebels with a cause — frustrated with the status quo and eager to disrupt it. Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast. Clear communicators — who own their ideas and follow through.

Our mission

This belief unites our team and drives every decision we make. We believe cybersecurity should empower, not burden. If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.

The Security Program Manager

You will work with our customers from the start to assess their current security/compliance framework, infrastructure stack, compliance requirements and overall objectives. You will provide guidance and recommendations for improving client security posture, develop high-level security programs, collaborate with clients to customize and refine the security program, communicate with clients and stakeholders, liaise with auditors, and maintain expertise across a range of security frameworks, control types, and technologies.

Key Responsibilities

• Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.
• Provide guidance and recommendations for improving client security posture.
• Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs.
• Collaborate with clients to customize and refine the security program to match their specific use cases.
• Communicate with clients and stakeholders to ensure smooth and efficient security program creation.
• Liaise with auditors to ensure clients' security programs align with auditors' expectations.
• Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
• Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
• Be highly technical, learn new technologies quickly, and translate security concepts into implementations.
• Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations.

Requirements

• Security/Compliance Experience: 4+ years in a role involving information security, compliance, or audit (security operations, GRC, vCISO, security advisory, IT/Compliance auditing, or a security-adjacent customer success/IT support role).
• Working and broad knowledge of security best practices, major compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR, PCI), and how controls map to real infrastructure and operations.
• Audit-side insight is particularly relevant.
• Account Management Experience: Technical Account Management experience, or client facing or stakeholder facing experience with strong project management instincts.
• Ability to understand client infrastructure and map security controls to meet compliance goals and the bigger picture of holistic security and compliance.
• Strong analytical skills to evaluate environments and determine appropriate safeguards.
• Excellent verbal and written communication skills.
• Self-driven with the ability to work independently, comfortable with ambiguity, and able to adapt approach client-by-client in a fast-moving startup environment.
• Willingness to go the extra mile to meet tight deadlines and deliver results.

Bonus Experience

• One or more of the following certifications: CISA, CISSP, CISM
• Exposure to a “Lead Auditor” scope (cross-framework, whole-program view) rather than a single specialty area
• Prior experience in customer success, IT support, or technical support background (useful for pace/responsiveness this role demands)

Why Oneleet?

At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. Here’s what makes us special:

• We value impact over titles, autonomy over micromanagement, and clarity over jargon.
• You’ll tackle meaningful, hard problems with real-world consequences.
• You’ll work with smart, kind, and ambitious teammates who lift each other up.
• We offer comprehensive health & wellness benefits, 20 days PTO per year, plus 8 floating holiday, remote work culture, team off-sites in stunning places (Amsterdam, Italy, etc), competitive compensation & equity, and U.S. hiring & E-Verify.