Associate Security Program Manager

About this role

Support clients in building and implementing security programs, while reviewing their audit evidence and controls for readiness. The role combines internal quality assurance with client-facing program support across compliance frameworks.

About the company

Oneleet helps startups get and stay security-compliant with automated controls and evidence collection. It supports teams pursuing SOC 2 and similar frameworks.

The team

Security/Compliance

Stack

What you'll do

• Review client evidence for SOC 2, ISO 27001, PCI, HIPAA, and GDPR audits.
• Check controls and identify evidence gaps with actionable recommendations.
• Support client consultations and build security programs tailored to their environments.
• Help clients implement policies, procedures, configurations, and software integrations.
• Coordinate with auditors and communicate security concepts to client stakeholders.
• Track audit-readiness metrics and share platform feedback with product and engineering.

What we're looking for

• 3+ years in information security, compliance, audit, or a related role.
• Working knowledge of SOC 2, ISO 27001, HIPAA, GDPR, and PCI.
• Familiarity with cloud and infrastructure technologies.
• Experience preparing or reviewing audit evidence.
• Strong client communication, organization, attention to detail, and project management skills.
• Able to manage multiple engagements and switch between focused reviews and client requests.

Nice to have

• CISA, Security+, CISSP Associate, CISM, or ISO 27001 certification progress or completion.
• Experience with compliance automation platforms.
• Customer success, IT support, technical support, or startup experience.

Benefits

• 20 days of PTO per year plus 8 floating holidays.
• Equity.
• Remote work.
• Team off-sites.