Remote Associate Security Program Manager (QA & Client)

OpenKrill; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health & wellness benefits

20 days PTO + 8 floating holidays

Remote work culture

Team off-sites

Job summary

Oneleet is a security and compliance platform focused on making cybersecurity painless. We seek an Associate Security Program Manager to balance internal audit/QA work with client-facing program support. This role grows toward a full Security Program Manager, helping clients build and audit security programs.

Join a fast-growing team delivering SOC 2, ISO 27001, and other standards, with a hybrid U.S. focus and global hiring.

Qualifications

• 3+ years in information security, compliance, or audit (GRC, IT or compliance auditing, security operations, security advisory, or similar)
• Working knowledge of SOC 2, ISO 27001, HIPAA, GDPR, and PCI
• Familiarity with cloud/infrastructure tech (AWS, Azure, GCP, Kubernetes, Docker, Terraform) and ability to learn quickly
• Exposure to reviewing/preparing evidence for compliance audits

Responsibilities

• Review client-uploaded evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness and accuracy
• Perform QA checks on controls and support pre-audit reviews
• Identify gaps and write actionable findings
• Maintain QA standards and contribute guidance for clients
• Coordinate with auditors to meet expectations
• Translate security concepts for diverse stakeholders

Skills

Information security

Compliance

Audit experience

SOC 2 knowledge

ISO 27001 knowledge

Tools

AWS

Azure

GCP

Kubernetes

Docker

Terraform

Job description

Oneleet is a security and compliance platform focused on making cybersecurity painless. We seek an Associate Security Program Manager to balance internal audit/QA work with client-facing program support. This role grows toward a full Security Program Manager, helping clients build and audit security programs.

Join a fast-growing team delivering SOC 2, ISO 27001, and other standards, with a hybrid U.S. focus and global hiring.