Associate Security Program Manager
New
O
OneleetCybersecurity compliance
US/LATAM - RemoteFull-TimeManager
Salary$35K - $65K; $35K – $65K • Offers Equity
Apply NowOpens the employer's application page
Job Details
- Experience
- 3+ years in information security, compliance, or audit
- Required Skills
- AWSGCPKubernetesAzureTerraformHIPAA
Requirements
- Have 3+ years of experience in information security, compliance, or audit, including GRC, IT or compliance auditing, security operations, security advisory, or security-adjacent customer success or IT support.
- Have working knowledge of SOC 2, ISO 27001, HIPAA, GDPR, and PCI.
- Understand how security controls map to real infrastructure and operations.
- Be familiar with cloud and infrastructure technologies such as AWS, Azure, GCP, Kubernetes, Docker, or Terraform.
- Have exposure to reviewing or preparing evidence for compliance audits.
- Bring client-facing or stakeholder-facing experience and strong organization and project management instincts.
- Demonstrate close attention to detail and a quality control mindset.
- Be able to document findings clearly in writing and communicate confidently on client calls.
- Be comfortable switching between focused review work and a high-volume, high-interruption client queue.
- Be able to manage multiple client engagements and work comfortably with ambiguity.
- Bonus: Have progress toward or hold a CISA, Security+, CISSP (Associate), CISM, or ISO 27001 Lead Auditor/Implementer certification.
- Bonus: Have experience with compliance automation platforms, customer success, IT support, technical support, or startups.
Responsibilities
- Review client-uploaded evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness, accuracy, and sufficiency.
- Perform QA checks on controls and support final pre-audit reviews before clients engage third-party auditors.
- Identify evidence gaps or weaknesses and document specific, actionable fixes.
- Maintain internal QA standards and review methodologies, and contribute to client guidance documents.
- Track audit readiness metrics and flag opportunities to improve processes.
- Share platform audit-readiness feedback with product and engineering teams.
- Join and help run client consultation calls to understand security posture, infrastructure, compliance requirements, and goals.
- Support Security Program Managers in building technical, operational, and administrative controls based on frameworks and client environments.
- Help clients implement policies, procedures, configurations, and software integrations.
- Coordinate with clients and auditors, translating security concepts for technical and non-technical stakeholders.
View Full Description & ApplyYou'll be redirected to the employer's site
