---
title: 'Security Program Manager at Oneleet'
canonical: 'https://feeny.ai/job/security-program-manager-oneleet-united-states-kmmybt0ycjw7'
type: 'job'
last_seen: '2026-09-13'
---

# Security Program Manager at Oneleet

- **Company:** Oneleet
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-07-06
- **Last confirmed live:** 2026-09-13
- **Apply:** https://jobs.ashbyhq.com/oneleet/acb72f78-9ba3-42d8-8109-a3b57193b9dd

## Job description

## About Oneleet

Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners. Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.

Who we’re looking for: We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. We’re especially drawn to:

- Rebels with a cause — frustrated with the status quo and eager to disrupt it.
- Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.
- Clear communicators — who own their ideas and follow through.

Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you. The Security Program Manager is part vCISO & part account manager. You will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, and work with clients to implement recommendations. You're passionate about security, and enjoy sharing your knowledge with not only our customers but your colleagues.

## Key Responsibilities

- Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.
- Provide guidance and recommendations for improving client security posture
- Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs.
- Collaborate with clients to customize and refine the security program to match their specific use cases.
- Communicate with clients and stakeholders to ensure smooth and efficient security program creation
- Liaise with auditors to ensure clients' security programs align with auditors' expectations
- Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
- Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
- Be highly technical, learn new technologies quickly, and translate security concepts into implementations.
- Partner with internal teams to translate security programs into implementations consisting of policies, procedures, configurations and software integrations.

## Requirements

Security/Compliance Experience

- 4+ years in a role involving information security, compliance, or audit (security operations, GRC, vCISO, security advisory, IT/Compliance auditing, or a security-adjacent customer success/IT support role). You’ll need to understand security and operations well enough that compliance becomes the natural byproduct of genuine security, not just checking boxes against the checklist. You should know why the box exists.
- Working and broad knowledge of security best practices, major compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR, PCI), and how controls map to real infrastructure and operations. Audit-side insight is particularly relevant.

Account Management Experience

- Technical Account Management experience, or client facing or stakeholder facing experience with strong project management instincts. This is a high-volume, high-interruption, relationship-oriented role that requires you to translate between technical and non-technical people. Startup and business fluency matters, whether gained internally or in consulting with startups, for helping companies find a compliance path that truly fits where they are today.
- Ability to understand client infrastructure and map security controls to meet compliance goals and the bigger picture of holistic security and compliance.
- Strong analytical skills to evaluate environments and determine appropriate safeguards.
- Excellent verbal and written communication skills.
- Self-driven with the ability to work independently, comfortable with ambiguity, and able to adapt approach client-by-client in a fast-moving startup environment.
- Willingness to go the extra mile to meet tight deadlines and deliver results.

Bonus Experience

- One or more of the following certifications: CISA, CISSP, CISM
- Exposure to a “Lead Auditor” scope (cross-framework, whole-program view) rather than a single specialty area
- Prior experience in customer success, IT support, or technical support background (useful for pace/responsiveness this role demands)

Why Oneleet? At Oneleet, you’ll join a tight-knit team of rebels redefining the cybersecurity industry. We move fast, own our work, and challenge outdated models to make security effortless and effective for companies. Here’s what makes us special:

- We value impact over titles, autonomy over micromanagement, and clarity over jargon.
- You’ll tackle meaningful, hard problems with real-world consequences.
- You’ll work with smart, kind, and ambitious teammates who lift each other up.

## Perks & Benefits

- Comprehensive health & wellness benefits
- 20 days PTO per year, plus 8 floating holiday
- Remote work culture
- Team off-sites in stunning places (Amsterdam, Italy, etc).
- Competitive compensation & equity

We hire globally and compensate competitively within each market using geographic pay bands. The range for this role reflects a US national baseline. Offers for candidates in higher cost-of-labor markets (e.g., San Francisco, New York, Zurich) may fall at or above the top of the posted range, while offers in other markets are benchmarked to local standards and are lower. Within any range, individual compensation is determined by work location, skills and experience demonstrated through the interview process, and relevant education or training. This posting reflects base salary only and does not include equity or benefits.

Remote-First & Global Hiring We’re a remote-first company and hire globally in regions where we can legally engage talent directly or via our employer-of-record (EOR) partner. If you’re based outside the U.S., we’ll explore the most compliant hiring arrangement for your location. We make hiring decisions based on merit, skills, and potential regardless of location.

U.S. Hiring & E-Verify For U.S.-based candidates, Oneleet participates in E-Verify to confirm employment eligibility, in accordance with federal regulations. We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.

How we use AI in this Hiring Process This company uses automated technology, including AI-assisted tools, to assist in reviewing applications, assessing candidate qualifications, and detecting fraudulent submissions. These tools analyze application data and identity signals to support, but not replace, human hiring decisions. All final hiring decisions are made by a human reviewer. Candidates who require accommodation or who wish to request information about how these tools are used, including requesting the bias audit results, may contact recruiting@oneleet.com. This process is conducted in compliance with applicable federal, state, and local laws. Notice for New York City Residents: You have a right to take at least 10 business days to decide whether to proceed with submitting your information through this process. By continuing, you confirm your understanding of this notice. If you choose to proceed before the 10-business-day period expires, you are making a knowing and voluntary decision to do so.

## About Oneleet

## Company Overview
- **One-liner**: Oneleet is a security-first compliance platform that automates SOC 2, ISO 27001, HIPAA, GDPR and other frameworks, combining AI-powered tooling with expert services to help companies build real security controls and achieve audit readiness.
- **Entity Type**: Private – Series A
- **Headquarters**: Wilmington, Delaware, United States
- **Founded**: 2022
- **Founders**: Bryan Onel (CEO & Co-founder), Ora Onel (Co-founder), Erik Vogelzang (Co-founder)

## Core Business
- Primary industry: Cybersecurity / Security Compliance & Risk Management
- Target customers: B2B – primarily SaaS companies of all sizes, from startups to enterprises
- Mission statement (from website): “Make compliance follow security—not the other way around.”

## Products & Services
- **Compliance Platform**: Unified dashboard to manage evidence collection, gap monitoring, and cross-framework control mapping for SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, FedRAMP, HITRUST, NIST, FDA, and ISO 42001.
- **Code Security Scanner**: Embed security early; identify and resolve vulnerabilities in codebases.
- **Attack Surface Discovery**: Monitor external-facing assets and risks from an attacker’s perspective.
- **Penetration Testing**: Expert-led tests by OSCE/OSWE certified pros.
- **vCISO + Security Programs**: On-demand enterprise-grade security expertise without a full-time CISO.
- **Access Reviews**: Automate user-permission reviews across critical systems to enforce least privilege.
- **Trust Center**: Showcase security posture to speed up sales cycles.
- **Third-Party Audits**: Streamlined auditing process with trusted partners.
- **Oneleet Agent**: Enforce security policies and monitor company devices.
- **Employee Portal**: Centralized security resources, training, and support.

## Market Standing
- **Valuation**: Not disclosed
- **Key Metric**: Total funding $33.125M (Seed + $33M Series A)
- **Notable Investors/Partners**: Series A led by Dawn Capital; seed round with multiple investors
- **Growth Signals**:
  - 73.9% YoY headcount growth (33 employees)
  - 51 active job postings as of mid‑2025 (+2450% YoY)
  - 4.9/5 product rating from 135+ reviews
  - Y Combinator’s most popular and highest-rated compliance platform
  - “One platform replaces 6 vendors” – typical time-to-audit reduced by 70%

## Competitive Advantages
- **AI‑native platform**: AI reads security questionnaires, generates risk assessments, maps controls, and reviews evidence automatically.
- **Unified system**: Combines compliance management, risk assessments, pentesting, code scanning, and trust center in a single platform – replacing multiple point solutions.
- **Cross‑framework mapping**: One control satisfies multiple frameworks simultaneously (e.g., SOC 2 covers 70% of ISO 27001).
- **YC pedigree + strong community reputation**: Used and endorsed widely in the YC ecosystem.

## Strategic Focus
- **AI integration**: Deeply embedding AI into every part of the compliance workflow to accelerate audit readiness and reduce manual work.
- **Expanding enterprise capabilities**: Building features that scale from 5-person startups to 6,000-person enterprises.
- **Global hiring**: Active recruitment across engineering, security program management, product, and growth roles – with a remote-first approach.

## Why Work Here
- **Culture**: High-growth, security-first startup with YC roots; known for pragmatic, engineering-driven approach.
- **Remote/Hybrid**: Fully remote with employees in 10 countries (US, Romania, Netherlands, UK, France, Canada, etc.). Some roles may have preference for EU/UK time zones.
- **Perks & engineering culture**: Autonomy to shape product; modern tech stack; exposure to security compliance AI; strong product ratings and user love.
- **Career growth**: Rapidly scaling company (73% YoY headcount, 51 open roles) – opportunities to grow as the company matures.
- **Notable roles open** (as of mid-2025): Fullstack Engineer, AI Implementation; Backend Engineer; Senior Software Engineer (Backend); Senior Product Designer; Product Manager; Security Program Manager; Growth Content & Community Manager.

## Sources
1. [oneleet.com](https://www.oneleet.com/) – Official product, mission, features
2. [linkedin.com/company/oneleet](https://www.linkedin.com/company/oneleet) – Employee count, funding, leadership
3. [ycombinator.com/companies/oneleet](https://www.ycombinator.com/companies/oneleet) – YC profile, job listings, founder background
4. [builtin.com/company/oneleet](https://builtin.com/company/oneleet) – Office policy, open roles, culture snapshot
5. [cbinsights.com/company/oneleet](https://www.cbinsights.com/company/oneleet) – Funding rounds, financial overview

## Other roles at Oneleet

- [GTM AI Engineer - Data & Attribution](https://feeny.ai/job/gtm-ai-engineer-data-attribution-oneleet-united-states-europe-4wjb68g3h88w) — United States / Europe
- [Community Event & Engagement Manager](https://feeny.ai/job/community-event-engagement-manager-oneleet-united-states-a2k8kvereec7) — United States
- [Framework Engineer](https://feeny.ai/job/framework-engineer-oneleet-united-states-7dm4st3m37c8) — United States
- [Backend Engineer](https://feeny.ai/job/backend-engineer-oneleet-united-states-europe-wacpgp4phgat) — United States / Europe
- [Fullstack Engineer](https://feeny.ai/job/fullstack-engineer-oneleet-united-states-europe-vx0bncfqvd1r) — United States / Europe
- [Renewals Account Manager](https://feeny.ai/job/renewals-account-manager-oneleet-united-states-t9vw14g83thk) — United States
- [Executive Assistant to the CEO](https://feeny.ai/job/executive-assistant-to-the-ceo-oneleet-netherlands-vcw4stjv9qv9) — Netherlands
- [Product Manager](https://feeny.ai/job/product-manager-oneleet-united-states-zhp7sa1ydrmj) — United States
- [Fullstack Engineer](https://feeny.ai/job/fullstack-engineer-oneleet-united-states-europe-war8hck5ytj3) — United States / Europe
- [Backend Engineer](https://feeny.ai/job/backend-engineer-oneleet-united-states-europe-276svp4sy1w5) — United States / Europe