Associate Security Program Manager

The posting, as Oneleet wrote it

ABOUT ONELEET

"Defenders think in lists, but attackers think in graphs." - Bryan Onel, Oneleet Co-Founder & CEO

Oneleet's mission is to make effective cybersecurity painless. We're building the all-in-one security and compliance platform: real security first, compliance as the result.

We recently closed a $33M Series A led by Dawn Capital. We're one of the fastest growing security companies in history, and we're only getting started. Our team of opinionated rebels has decades of security and compliance experience, with vision and expertise, reshaping the broken and fragmented compliance and cybersecurity industry.

If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.

WHO WE’RE LOOKING FOR

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.

We’re especially drawn to

• Rebels with a cause — frustrated with the status quo and eager to disrupt it.
• Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.
• Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.

THE ROLE

The Associate Security Program Manager has hybrid responsibility across internal security compliance audit, and security program management. A key part of your focus is on our internal QA team, reviewing client evidence and controls before clients face their external auditors. The other half is client-facing, supporting our Security Program Managers as they guide companies from first call to audit-ready security programs.

Your evidence reviews protect clients from failed audits and false confidence. Your client work makes sure the fixes are real, so compliance becomes a byproduct of actual security. You'll grow into a full Security Program Manager by doing both. You care about security, you like explaining it, and you want to know why every control exists, not just whether it's checked.

KEY RESPONSIBILITIES

Internal Audit & Controls Review (~50%)

• Review client-uploaded evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness, accuracy, and sufficiency.
• Perform QA checks on individual controls, and support final pre-audit reviews before clients engage third-party auditors.
• Identify gaps or weak evidence and write clear findings with specific, actionable fixes.
• Help maintain internal QA standards and review methodologies, and contribute to guidance documents that help clients produce better evidence.
• Track audit readiness metrics and flag opportunities to improve our process.
• Share feedback with our product and engineering teams on where the platform can better support audit r

[…]
ork location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits.

Remote-First & Global Hiring

We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location.

U.S. Hiring & E-Verify

For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.

How we use AI in this Hiring Process

This company uses automated technology, including AI-assisted tools, to assist in reviewing applications, assessing candidate qualifications, and detecting fraudulent submissions. These tools analyze application data and identity signals to support, but not replace, human hiring decisions. All final hiring decisions are made by a human reviewer. Candidates who require accommodation or who wish to request information about how these tools are used, including requesting the bias audit results, may contact recruiting@oneleet.com. This process is conducted in compliance with applicable federal, state, and local laws.

Notice for New York City Residents

You have a right to take at least 10 business days to decide whether to proceed with submitting your information through this process. By continuing, you confirm your understanding of this notice. If you choose to proceed before the 10-business-day period expires, you are making a knowing and voluntary decision to do so.