Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Oneleet is seeking an Associate Program Manager in security compliance to help run audit and compliance work for multiple clients, tracking evidence, maintaining schedules, and coordinating between testers, auditors, and client teams.
The role emphasizes strong organization, clear written communication, and the ability to learn compliance frameworks, with a focus on supervising AI output and ensuring conclusions are grounded in real findings.
An associate program manager in security compliance usually helps run audit and compliance work for several clients at once: tracking evidence, keeping schedules moving, and coordinating between testers, auditors and client teams. A strong candidate brings solid organization, clear written communication, comfort learning compliance frameworks, and the patience to follow details through to the end. Because this company pairs real penetration testing with a managed compliance team, the role likely sits between technical findings and the audit process, so translating between the two matters.
AI speeds up evidence collection, control mapping and first drafts of policy and report text, which shifts the job toward checking that the evidence is real and the conclusions hold. The human core stays the same: judging risk, asking the awkward question, and keeping clients and auditors aligned through a stressful audit. Someone in this role should expect to supervise AI output rather than produce every document by hand.
This role offers hands on practice using AI to sort evidence, draft control narratives and spot gaps across frameworks, then verifying each result against real test findings. Building that experience means learning one compliance framework well, trying AI tools on sample evidence sets, and documenting where the tool was wrong. That habit of checking machine output against ground truth is the experience worth showing.
This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.
A security compliance platform that bundles real penetration testing and a managed compliance team with automated evidence collection, aimed at making audits genuine rather than a box-ticking exercise.