Remote Security Program Manager (vCISO Lead)

Oneleet; Amsterdam; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Remote work culture

20 days PTO per year

Team off-sites in Amsterdam and more

Competitive compensation & equity

Job summary

Oneleet is hiring a Security Program Manager to work with customers from initial assessment through implementation of security and compliance improvements. You will build high-level programs across technical, operational, and administrative controls, aligning with frameworks like SOC 2, ISO 27001, and GDPR while collaborating with auditors and internal teams.

You’ll translate complex security concepts into practical solutions, engage with multiple stakeholders, and help shape secure, scalable

Qualifications

• 4+ years in information security, compliance, or audit roles (security operations, GRC, vCISO, advisory, IT/Compliance).
• Knowledge of major frameworks: SOC2, ISO27001, HIPAA, GDPR, PCI.

Responsibilities

• Conduct initial consultations to assess client security posture and objectives.
• Provide guidance and recommendations for improving client security posture.
• Develop high-level security programs with technical, operational, and administrative controls.
• Collaborate with clients to tailor security programs to use cases and needs.
• Communicate with clients and stakeholders to ensure smooth program creation.
• Liaise with auditors to align programs with expectations.
• Maintain expertise across NIST, SOC2, ISO27001, CMMC, cloud providers, Kubernetes, Docker, Terraform.
• Provide feedback to engineering for integrations and product improvements.
• Translate security concepts into concrete implementations and policies.

Skills

Project management

Account management

Communication

Analytical skills

Self-driven

Adaptability

Tools

AWS

Azure

GCP

Kubernetes

Docker

Terraform

Job description

Oneleet is hiring a Security Program Manager to work with customers from initial assessment through implementation of security and compliance improvements. You will build high-level programs across technical, operational, and administrative controls, aligning with frameworks like SOC 2, ISO 27001, and GDPR while collaborating with auditors and internal teams.

You’ll translate complex security concepts into practical solutions, engage with multiple stakeholders, and help shape secure, scalable