At a Glance
- Tasks: Lead security programs and guide clients in enhancing their cybersecurity posture.
- Company: Join Oneleet, a dynamic cybersecurity startup on a mission to revolutionise the industry.
- Benefits: Enjoy competitive pay, comprehensive benefits, flexible remote work, and exciting quarterly trips.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technology and a passionate team.
- Qualifications: 3+ years in information security, strong analytical skills, and excellent communication abilities.
- Other info: Be part of a tight-knit crew that values innovation and personal growth.
The predicted salary is between 36000 - 60000 £ per year.
Oneleet is a cybersecurity startup with a mission to revolutionise the industry. It aims to make effective cybersecurity easy and painless for companies by providing a comprehensive platform that helps companies build, manage, and monitor their cybersecurity management programme.
Oneleet is backed by top-tier venture capital firms including Y Combinator, and is part of their S22 cohort. The founding team has over 10 years of penetration testing and cybersecurity experience. Be a part of our team of opinionated rebels and help us create a category-defining company on a mission to reshape the broken and fragmented cybersecurity industry.
Who We’re Looking For
At Oneleet we value individuals who are passionate and motivated to make a large impact in the cybersecurity ecosystem. We are looking for rebels with a growth mindset who love to take ownership, who exhibit excellent communication skills, and who have a "can-do" attitude towards technical challenges and innovation.
A rebel’s mindset — we’re frustrated with the state of the cybersecurity industry, and believe that a rebel mindset is key to changing it. Opinionated (but not obstinate) — we believe that having an opinion is better than having no opinion, and helps us move quicker.
Key Responsibilities
- Conduct initial consultation calls with new clients to assess their current security posture, infrastructure stack, compliance requirements and overall objectives.
- Provide guidance and recommendations for improving client security posture.
- Develop high-level security programmes consisting of technical, operational and administrative controls based on industry frameworks and client needs.
- Collaborate with clients to customise and refine the security programme to match their specific use cases.
- Communicate with clients and stakeholders to ensure smooth and efficient security programme creation.
- Liaise with auditors to ensure clients' security programmes align with auditors' expectations.
- Maintain expertise across a range of security frameworks, control types, and technologies including GDPR, NIST, ISO27001, SOC2, CMMC, AWS, Azure, GCP, Kubernetes, Docker, Terraform, and more.
- Provide feedback to Oneleet's engineering team to inform development of integrations, solutions, and products that deliver on client needs.
- Be highly technical, learn new technologies quickly, and translate security concepts into implementations.
- Partner with internal teams to translate security programmes into implementations consisting of policies, procedures, configurations and software integrations.
Requirements
- 3+ years in an information security role.
- Must be located in the EU or UK.
- Broad knowledge of security best practices, frameworks, control types, and relevant technologies.
- Ability to understand client infrastructure and map security controls to meet compliance goals.
- Strong analytical skills to evaluate environments and determine appropriate safeguards.
- Excellent verbal and written communication skills.
- Self-driven with the ability to work independently and move fast in a startup environment.
- Willingness to go the extra mile to meet tight deadlines and deliver results.
Why Oneleet
At Oneleet, you’ll join a tight-knit crew of cybersecurity rebels on a mission to reshape the industry. We move fast, take ownership, and aren’t afraid to disrupt stagnant business models to make security effortless for companies. Our "work hard, play hard" culture means we hold ourselves to high standards, then celebrate wins. Our leading-edge tech stack keeps things exciting for any geek. And our experienced team ensures you’re always sharpening your skills. Bottom line, you’ll have a blast doing deeply meaningful work. Expect hard problems, lots of autonomy, and plenty of growth. If you want your work to drive real change, this is the place to make your impact.
Benefits
- Comprehensive benefits packages designed to support your health and well-being.
- Competitive compensation & equity.
- Plenty of PTO.
- Floating holidays to honour the days that matter most to you.
- Flexible remote work.
- Quarterly off sites to cool places (Amsterdam, Italy etc).
Seniority level: Mid-Senior level
Employment type: Full-time
Job function: Project Management and Information Technology
Industries: Computer and Network Security
Security Program Manager (EU/UK based) employer: Oneleet
Contact Detail:
Oneleet Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security Program Manager (EU/UK based)
✨Tip Number 1
Network like a pro! Get out there and connect with folks in the cybersecurity space. Attend meetups, webinars, or even just grab a coffee with someone in the industry. You never know who might have the inside scoop on job openings at Oneleet or other cool companies.
✨Tip Number 2
Show off your skills! If you’ve got a portfolio of projects or case studies, make sure to highlight them during interviews. Talk about how you’ve tackled security challenges in the past and how that experience can help Oneleet revolutionise the cybersecurity industry.
✨Tip Number 3
Be ready to chat about your passion for security! Oneleet loves rebels who are opinionated and eager to share their knowledge. Prepare some thoughts on current trends in cybersecurity and how you can contribute to the team’s mission.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in being part of the Oneleet crew. Let’s shake up the cybersecurity world together!
We think you need these skills to ace Security Program Manager (EU/UK based)
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Security Program Manager role. Highlight your relevant experience in cybersecurity and how it aligns with Oneleet's mission to revolutionise the industry.
Show Off Your Rebel Mindset: We love a good rebel! In your application, share examples of how you've taken ownership and tackled challenges in your previous roles. This will show us you're the kind of person who can help us disrupt the cybersecurity space.
Communicate Clearly: Since excellent communication skills are key for this role, ensure your written application is clear and concise. Use straightforward language to convey your ideas and experiences, making it easy for us to see your potential.
Apply Through Our Website: Don't forget to submit your application through our website! It’s the best way for us to receive your details and ensures you’re considered for the role. Plus, we love seeing applications come directly from our site!
How to prepare for a job interview at Oneleet
✨Know Your Cybersecurity Frameworks
Make sure you brush up on key security frameworks like GDPR, NIST, and ISO27001 before your interview. Being able to discuss how these frameworks apply to real-world scenarios will show that you’re not just knowledgeable but also practical in your approach.
✨Show Off Your Communication Skills
As a Security Program Manager, you'll need to communicate complex security concepts clearly. Prepare examples of how you've successfully communicated with clients or stakeholders in the past. This will demonstrate your ability to bridge the gap between technical jargon and client understanding.
✨Demonstrate Your Rebel Mindset
Oneleet values a 'rebel mindset', so come prepared with examples of how you've challenged the status quo in your previous roles. Share instances where you took ownership of a project or proposed innovative solutions to overcome obstacles.
✨Prepare for Technical Questions
Expect some technical questions that assess your analytical skills and understanding of security controls. Brush up on your knowledge of various technologies like AWS, Azure, and Docker, and be ready to discuss how you would implement security measures in different environments.