Associate Security Program Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Evaluate client-submitted evidence across SOC 2, ISO 27001, PCI, HIPAA, and GDPR for completeness, accuracy, and adequacy.

• Conduct quality assurance checks on individual controls and assist with final pre-audit reviews prior to third-party audits.

• Detect gaps or insufficient evidence and document clear findings with actionable recommendations.

• Uphold internal quality assurance standards and review methodologies.

• Contribute to guidance materials that assist clients in generating improved evidence.

• Monitor audit readiness metrics and identify areas for process enhancement.

• Provide feedback to product and engineering teams regarding platform support for audit preparedness.

• Participate in and facilitate consultation calls with new clients.

• Comprehend clients’ security posture, infrastructure stack, compliance requirements, and objectives.

• Assist Security Program Managers in developing technical, operational, and administrative control programs.

• Aid clients in implementing policies, procedures, configurations, and software integrations.

• Act as a point of contact for clients, translating security concepts for both technical and non-technical stakeholders.

• Collaborate with auditors to ensure client programs align with auditor expectations.

• Support clients in providing accurate evidence on the first attempt.

⛳️ Requirements

• A minimum of 3 years in information security, compliance, or auditing (including GRC, IT or compliance auditing, security operations, security advisory, or a security-related customer success or IT support role).

• Proficient knowledge of SOC 2, ISO 27001, HIPAA, GDPR, and PCI, along with understanding how controls relate to actual infrastructure and operations.

• Familiarity with AWS, Azure, GCP, Kubernetes, Docker, or Terraform, and a quick learning ability for new technologies.

• Experience reviewing or preparing evidence for compliance audits.

• Client-facing or stakeholder engagement experience.

• Strong organizational skills and project management abilities.

• Exceptional attention to detail and a quality control mindset.

• Clear written communication skills for documenting findings.

• Confident verbal communication abilities on client calls.

• Comfortable transitioning between focused review tasks and a high-volume, high-interruption client queue.

• Self-motivated, adaptable to ambiguity, and capable of managing multiple client engagements in a fast-paced startup environment.

• Progress towards or possession of certifications such as CISA, Security+, CISSP (Associate), CISM, or ISO 27001 Lead Auditor/Implementer is advantageous.

• Experience with compliance automation platforms is a plus.

• Background in customer success, IT support, or technical support is a plus.

• Experience in a startup environment is a plus.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• 20 days of paid time off per year.

• 8 floating holidays.

• Remote work culture.

• Team off-site events in beautiful locations (Amsterdam, Italy, etc.).

• Competitive salary.

• Equity opportunities.