- Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.
- Provide guidance and recommendations for improving client security posture.
- Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs.
- Collaborate with clients to customize and refine the security program to match their specific use cases.
- Communicate with clients and stakeholders to ensure smooth and efficient security program creation.
- Liaise with auditors to ensure clients' security programs align with auditors' expectations.
- Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
- Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
- Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations.