Associate Security Program Manager

Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners.

Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.

We’re especially drawn to:

• Rebels with a cause — frustrated with the status quo and eager to disrupt it.

• Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.

• Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.

If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.

The Associate Security Program Manager has hybrid responsibility across internal security compliance audit, and security program management. A key part of your focus is on our internal QA team, reviewing client evidence and controls before clients face their external auditors. The other half is client-facing, supporting our Security Program Managers as they guide companies from first call to audit-ready security programs.

Your evidence reviews protect clients from failed audits and false confidence. Your client work makes sure the fixes are real, so compliance becomes a byproduct of actual security. You'll grow into a full Security Program Manager by doing both. You care about security, you like explaining it, and you want to know why every control exists, not just whether it's checked.

Internal Audit & Controls Review (~50%)

• Review client-uploaded evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness, accuracy, and sufficiency.

• Perform QA checks on individual controls, and support final pre-audit reviews before clients engage third-party auditors.

• Identify gaps or weak evidence and write clear findings with specific, actionable fixes.

• Help maintain internal QA standards and review methodologies, and contribute to guidance documents that help clients produce better evidence.

• Track audit readiness metrics and flag opportunities to improve our process.

• Share feedback with our product and engineering teams on where the platform can better support audit readiness.

Client-Facing Security Program Support (~50%)

• Join and help run consultation calls with new clients to understand their security posture, infrastructure stack, compliance requirements, and goals.

• Support Security Program Managers in building security programs of technical, operational, and administrative controls based on industry frameworks and each client's actual environment.

• Help clients turn programs into real implementations: policies, procedures, configurations, and software integrations.

• Serve as a responsive point of contact for clients, translating security concepts for both technical and non-technical stakeholders.

• Help coordinate with auditors so client programs meet auditor…