Security Program Manager (EU/UK based)

Oneleet; Espagne; Hybride; EUR 70 000 - 95 000; Plein temps

Avantages offerts par ce poste

Comprehensive benefits

Equity

Plenty of PTO

Floating holidays

Flexible remote work

Quarterly offsites

Résumé du poste

Oneleet seeks a Security Program Manager to act as a vCISO and account manager, guiding clients from assessment to implementation of security and compliance improvements. You’ll translate complex security concepts into concrete actions, collaborating with auditors and internal teams to deliver tailored programs.

You will manage ongoing client relationships, drive security program development, and stay current on frameworks like GDPR, NIST, ISO27001, SOC2, and cloud technologies.

Qualifications

• 3+ years in an information security role.
• Must be located in the EU or UK.
• Broad knowledge of security best practices, frameworks, control types, and relevant technologies.
• Ability to map security controls to meet compliance goals.
• Strong analytical and communication skills.

Responsabilités

• Conduct initial consultation calls with new clients to assess security posture and objectives.
• Provide guidance and recommendations for improving client security posture.
• Develop high-level security programs with technical, operational, and administrative controls.
• Collaborate with clients to tailor security programs to use cases.
• Communicate with clients and stakeholders to ensure smooth program creation.
• Liaise with auditors to align programs with expectations.
• Maintain expertise across security frameworks and technologies including GDPR, NIST, ISO27001, SOC2, CMMC, cloud providers, Kubernetes, Docker, Terraform.
• Provide feedback to engineering to inform integrations and products.
• Translate security concepts into actionable implementations.
• Partner with internal teams to translate programs into policies and configurations.

Connaissances

Information security

Analytical skills

Communication skills

Startup environment

Outils

GDPR

NIST

ISO27001

SOC2

CMMC

AWS

Azure

GCP

Kubernetes

Docker

Terraform

Description du poste

About Oneleet

Oneleet is a cybersecurity startup with a mission to revolutionize the industry. It aims to make effective cybersecurity easy and painless for companies by providing a comprehensive platform that helps companies build, manage, and monitor their cybersecurity management program.

Oneleet is backed by top-tier venture capital firms including Y Combinator, and is part of their S22 cohort. The founding team has over 10 years of penetration testing and cybersecurity experience.

Be a part of our team of opinionated rebels and help us create a category-defining company on a mission to reshape the broken and fragmented cybersecurity industry.

Who We’re Looking For

At Oneleet we value individuals who are passionate and motivated to make a large impact in the cybersecurity ecosystem. We are looking for rebels with a growth mindset who love to take ownership, who exhibit excellent communication skills, and who have a "can-do" attitude towards technical challenges and innovation.

A rebel’s mindset — we’re frustrated with the state of the cybersecurity industry, and believe that a rebel mindset is key to changing it. Opinionated (but not obstinate) — we believe that having an opinion is better than having no opinion, and helps us move quicker.

The Security Program Manager

The Security Program Manager is part vCISO & part account manager. You will work with our customers from the start to asses their current security/compliance framework, provide guidance and recommendations for improvements, and work with clients to implement recommendations. You're passionate about security, and enjoy sharing your knowledge with not only our customers but your colleagues.

Key Responsibilities

• Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.
• Provide guidance and recommendations for improving client security posture
• Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs.
• Collaborate with clients to customize and refine the security program to match their specific use cases.
• Communicate with clients and stakeholders to ensure smooth and efficient security program creation
• Liaise with auditors to ensure clients' security programs align with auditors' expectations
• Maintain expertise across a range of security frameworks, control types, and technologies including GDPR, NIST, ISO27001, SOC2, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
• Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
• Be highly technical, learn new technologies quickly, and translate security concepts into implementations
• Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations.

Requirements

• 3+ years in an information security role
• Must be located in the EU or UK
• Broad knowledge of security best practices, frameworks, control types, and relevant technologies.
• Ability to understand client infrastructure and map security controls to meet compliance goals.
• Strong analytical skills to evaluate environments and determine appropriate safeguards.
• Excellent verbal and written communication skills.
• Self-driven with the ability to work independently and move fast in a startup environment.
• Willingness to go the extra mile to meet tight deadlines and deliver results.

Why Oneleet

At Oneleet, you'll join a tight-knit crew of cybersecurity rebels on a mission to reshape the industry. We move fast, take ownership, and aren't afraid to disrupt stagnant business models to make security effortless for companies.

Our "work hard, play hard" culture means we hold ourselves to high standards, then celebrate wins. Our leading-edge tech stack keeps things exciting for any geek. And our experienced team ensures you're always sharpening your skills.

Bottom line, you'll have a blast doing deeply meaningful work. Expect hard problems, lots of autonomy, and plenty of growth. If you want your work to drive real change, this is the place to make your impact.

Startup perks

• Comprehensive benefits packages designed to support your health and well-being
• Competitive comp & equity
• Plenty of PTO
• Floating holidays to honor the days that matter most to you
• Flexible remote work
• Quarterly off sites to cool places (Amsterdam, Italy etc)