Security Program Manager
Oneleet · Remote · United States ·
COMPENSATION
$75k – $140k
Listed on the employer's job board (Ashby)
- Fully remote (Global)
- vCISO + Account Mgmt
- SOC 2 & ISO 27001
- 4+ years experience
- Competitive equity
As a Security Program Manager at Oneleet, you will act as both a virtual CISO and an account manager. You will assess client security postures, design customized control frameworks, and collaborate with internal teams to implement solutions that meet standards such as SOC 2 and ISO 27001.
This position requires translating complex security concepts for non-technical stakeholders while maintaining deep technical expertise. You will work directly with customers to align their infrastructure with compliance goals, ensuring security empowers rather than burdens their operations.
What you'll do
- Conduct initial consultations to assess client security posture and compliance needs
- Design high-level security programs with technical and administrative controls
- Customize security frameworks to match specific client use cases and objectives
- Liaise with auditors to ensure programs meet external expectations and standards
- Provide product feedback to engineering based on client implementation challenges
- Translate security concepts into actionable policies, procedures, and configurations
What you'll need
- 4+ years in information security, compliance, audit, or vCISO roles
- Broad knowledge of SOC 2, ISO 27001, HIPAA, GDPR, and PCI frameworks
- Experience in technical account management or client-facing project management
- Ability to map security controls to real infrastructure and operational needs
- Strong verbal and written communication skills for diverse stakeholders
- Comfortable working independently in ambiguous, fast-paced startup environments
Nice to have
- Hold certifications such as CISA, CISSP, or CISM
- Experience with Lead Auditor scope across multiple frameworks
- Background in customer success, IT support, or technical support
Stack
- NIST
- SOC 2
- ISO 27001
- CMMC
- AWS
- Azure
- GCP
- Kubernetes
- Docker
- Terraform
How you'll work
- Remote-first company hiring globally via direct employment or EOR
- US national baseline salary with geographic adjustments for other markets
- Participates in E-Verify for US-based candidates
What you get
- Comprehensive health and wellness benefits
- 20 days paid time off plus 8 floating holidays
- Competitive compensation and equity packages
- Team off-sites in locations such as Amsterdam and Italy
Hiring process
- AI-assisted tools review applications and detect fraudulent submissions
- Human reviewers make all final hiring decisions
- NYC residents may take 10 business days before submitting information