Remote-First Associate Security Program Manager

Oneleet; Oregon; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Comprehensive health & wellness

20 days PTO + 8 floating holidays

Remote work culture

Team off-sites

Competitive compensation & equity

Job summary

Oneleet is a fast-growing security and compliance platform changing how organizations approach cybersecurity and compliance. The Associate Security Program Manager works across internal audit, QA reviews, and client-facing security program support, helping clients reach audit readiness with practical, real fixes.

You will review evidence for SOC 2, ISO 27001, PCI, HIPAA, and GDPR, identify gaps, and guide clients through policy, procedures and configurations for compliant security programs.

Qualifications

• 3+ years in information security, compliance, or audit (GRC, IT or compliance auditing, security operations, security advisory, or security-adjacent customer success).
• Familiarity with SOC 2, ISO 27001, HIPAA, GDPR, and PCI, and how controls map to real infrastructure and operations.
• Exposure to cloud and infrastructure technologies such as AWS, Azure, GCP, Kubernetes, Docker, or Terraform, with ability to learn new ones quickly.
• Experience reviewing or preparing evidence for compliance audits.

Responsibilities

• Review client-uploaded evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness and accuracy.
• Perform QA checks on controls and support pre-audit reviews with clients.
• Identify gaps in evidence and write clear, actionable fixes.
• Help maintain QA standards and contribute to guidance documents for clients.

Skills

InfoSec experience

SOC 2 knowledge

ISO 27001 knowledge

HIPAA/GDPR/PCI familiarity

Cloud tech proficiency

Tools

AWS

Azure

GCP

Kubernetes

Docker

Terraform

Job description

Oneleet is a fast-growing security and compliance platform changing how organizations approach cybersecurity and compliance. The Associate Security Program Manager works across internal audit, QA reviews, and client-facing security program support, helping clients reach audit readiness with practical, real fixes.

You will review evidence for SOC 2, ISO 27001, PCI, HIPAA, and GDPR, identify gaps, and guide clients through policy, procedures and configurations for compliant security programs.