Oneleet is one of the fastest-growing security and compliance platforms in history. We are on a mission to change the compliance and security industry by making cybersecurity and compliance effective, easy, and painless. We provide a platform that helps companies build, manage, and monitor their cybersecurity programs and achieve compliance standards such as SOC 2 and ISO 27001 efficiently, without cutting corners.
Having just raised a $33 million Series A, we are rapidly growing in customers and employees. Our team has decades of experience in security and compliance. Join our team of opinionated rebels and help us build a category-defining company reshaping the broken and fragmented compliance and cybersecurity industry.
Who we’re looking for:

We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in. We’re especially drawn to: Rebels with a cause — frustrated with the status quo and eager to disrupt it. Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast. Clear communicators — who own their ideas and follow through. Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make. If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you. The Security Program Manager is part vCISO & part account manager. You will work with our customers from the start to assess their current security/compliance framework, provide guidance and recommendations for improvements, and work with clients to implement recommendations. You're passionate about security, and enjoy sharing your knowledge with not only our customers but your colleagues. Key Responsibilities

Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.
Provide guidance and recommendations for improving client security posture
Develop high-level security programs consisting of technical, operational and administrative controls based on industry frameworks and client needs.
Collaborate with clients to customize and refine the security program to match their specific use cases.
Communicate with clients and stakeholders to ensure smooth and efficient security program creation
Liaise with auditors to ensure clients' security programs align with auditors' expectations
Maintain expertise across a range of security frameworks, control types, and technologies including NIST, SOC2, ISO27001, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
Be highly technical; learn new technologies quickly; translate security concepts into implementations including policies & software integrations.

Requirements

4+ years in information security/compliance/audit roles with understanding of security operations & compliance frameworks (SOC 2 / ISO 27001 / HIPAA / GDPR / PCI)
Technical account management or client-facing experience; project management skills preferred
Ability to map client infrastructure & systems to security controls for compliance goals
Strong analytical skills; excellent communication; self-driven; adaptable in startup environment

Bonus Experience:

Certifications like CISA / CISSP / CISM
Lead Auditor experience
Customer success or IT/technical support background

Why Oneleet?

Fast-moving team focused on impact over titles.
Meaningful work solving real-world problems.
Smart kind teammates in remote-first global company.

Perks & Benefits:

Comprehensive health & wellness benefits;
20 days PTO + 8 floating holidays;
Remote work culture;
Team off-sites internationally;
Competitive compensation & equity;

Additional Notes: We hire globally paying competitively based on local market standards; U.S candidates subject to EVerify; Equal opportunity employer committed to non-discrimination; Use AI-assisted tools in hiring process but humans make final decisions.

Security Program Manager - LATAM