oneleet - Security Program Manager - LATAM
Requirements
• We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. • We’re especially drawn to: • Rebels with a cause — frustrated with the status quo and eager to disrupt it. • Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast. • Clear communicators — who own their ideas and follow through. • Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. • If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you. • The Security Program Manager is part vCISO & part account manager. You will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, and work with clients to implement recommendations. You're passionate about security, and enjoy sharing your knowledge with not only our customers but your colleagues. • 4+ years in a role involving information security, compliance, or audit (security operations, GRC, vCISO, security advisory, IT/Compliance auditing, or a security-adjacent customer success/IT support role). You’ll need to understand security and operations well enough that compliance becomes the natural byproduct of genuine security, not just checking boxes against the checklist. You should know why the box exists. • Working and broad knowledge of security best practices, major compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR, PCI), and how controls map to real infrastructure and operations. Audit-side insight is particularly relevant. • Technical Account Management experience, or client facing or stakeholder facing experience with strong project management instincts. This is a high-volume, high-interruption, relationship-oriented role that requires you to translate between technical and non-technical people. Startup and business fluency matters, whether gained internally or in consulting with startups, for helping companies find a compliance path that truly fits where they are today. • Ability to understand client infrastructure and map security controls to meet compliance goals and the bigger picture of holistic security and compliance. • Strong analytical skills to evaluate environments and determine appropriate safeguards. • Excellent verbal and written communication skills. • Self-driven with the ability to work independently, comfortable with ambiguity, and able to adapt approach client-by-client in a fast-moving startup environment. • Willingness to go the extra mile to meet tight deadlines and deliver results. • One or more of the following certifications: CISA, CISSP, CISM • Exposure to a “Lead Auditor” scope (cross-framework, whole-program view) rather than a single specialty area • Prior experience in customer success, IT support, or technical support background (useful for pace/responsiveness this role demands)
Responsibilities
• Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives. • Provide guidance and recommendations for improving client security posture • Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs. • Collaborate with clients to customize and refine the security program to match their specific use cases. • Communicate with clients and stakeholders to ensure smooth and efficient security program creation • Liaise with auditors to ensure clients' security programs align with auditors' expectations • Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more. • Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs. • Be highly technical, learn new technologies quickly, and translate security concepts into implementations. • Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations.
Benefits
• $45K – $80K • Offers Equity • Salary ranges are determined by role and by level, and within the range individual pay is determined by additional factors including job-related skills and experience. Total compensation includes salary + benefits + equity, however equity and benefits are not captured in this range. We hire talent globally and pay competitively based on where you live. • Upload your resume here to autofill key application fields. • Drop your resume here! • Parsing your resume. Autofilling key fields... • or drag and drop here • GitHub, Portfolio, etc • Why are you interested in joining Oneleet? • What do you feel are 2-3 unique skills you can bring to this role? • Decline to self-identify • Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race. • Hispanic or Latino • White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa. • White • Black or African American (Not Hispanic or Latino) - A person having origins in any of the Black racial groups of Africa. • Black or African American • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands. • Native Hawaiian or Other Pacific Islander • Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam. • Asian • American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment. • American Indian or Alaska Native • Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races. • Two or More Races • Hispanic or Latino • White (Not Hispanic or Latino) • Black or African American (Not Hispanic or Latino) • Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) • Asian (Not Hispanic or Latino) • American Indian or Alaska Native (Not Hispanic or Latino) • Two or More Races (Not Hispanic or Latino) • I identify as one or more of the classifications of protected veteran listed above • I am not a protected veteran
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT