ABOUT ONELEET
"Defenders think in lists, but attackers think in graphs." - Bryan Onel, Oneleet Co-Founder & CEO
Oneleet's mission is to make effective cybersecurity painless. We're building the all-in-one security and compliance platform: real security first, compliance as the result.
We recently closed a $33M Series A led by Dawn Capital. We're one of the fastest growing security companies in history, and we're only getting started. Our team of opinionated rebels has decades of security and compliance experience, with vision and expertise, reshaping the broken and fragmented compliance and cybersecurity industry.
If you’re ready to challenge the status quo and help shape the future of cybersecurity, we’d love to meet you.
WHO WE’RE LOOKING FOR:
We value passionate self-starters with a growth mindset and a bias for action and personal accountability. If you love solving hard problems, thrive in ambiguity, and want to make a real impact, you’ll fit right in.
We’re especially drawn to:
- Rebels with a cause — frustrated with the status quo and eager to disrupt it.
- Opinionated (but not obstinate) builders — decisive yet collaborative, who help us move fast.
- Clear communicators — who own their ideas and follow through.
Our mission is simple: make effective cybersecurity painless. We believe cybersecurity should empower, not burden. This belief unites our team and drives every decision we make.
THE ROLE:
The Internal Security Compliance Auditor plays a critical role in ensuring the quality and completeness of client evidence before they undergo formal external compliance audits. Working behind the scenes as part of our internal quality assurance team, you'll partner with our Security Program Managers to review controls documentation, validate evidence quality, and perform final pre-audit quality assurance checks across multiple compliance frameworks including SOC2, ISO27001, PCI, HIPAA, and GDPR.
Your expertise will strengthen our clients' compliance posture and prepare them thoroughly for their audit processes, while maintaining the high standards that differentiate Oneleet in the marketplace. This position requires deep technical knowledge of compliance frameworks combined with meticulous attention to detail.
KEY RESPONSIBILITIES:
- Perform thorough internal reviews of client-uploaded evidence for compliance frameworks including SOC2, ISO27001, PCI, HIPAA, and GDPR
- Conduct detailed quality assurance checks on individual controls to verify completeness, accuracy, and sufficiency prior to their audits with third-party auditing firms.
- Execute comprehensive final QA reviews prior to clients engaging with an external auditor.
- Identify gaps or weaknesses in evidence documentation and recommend improvements
- Develop and maintain internal QA standards and review methodologies
- Create guidance documents to help clients improve evidence quality
- Collaborate with Security Program Engineers to address compliance gaps
- Stay current on evolving compliance requirements across multiple frameworks to ensure our pre-audit preparation meets industry standards
- Track audit readiness metrics and identify opportunities for process improvement
- Provide expert feedback to our product team for compliance platform enhancements to better support pre-audit readiness
REQUIREMENTS:
- Deep understanding of SOC2, ISO27001, PCI, HIPAA, and GDPR requirements
- Strong technical knowledge of security controls and their implementation
- Experience reviewing and evaluating evidence for compliance audits, particularly in preparing organizations for external audit processes
- Excellent attention to detail and quality control mindset
- Strong written communication skills for documenting findings
- Ability to work independently while supporting multiple client engagements
- Familiarity with compliance automation platforms and tools
- Experience in pre-audit preparation and internal quality assurance, preferably with multiple frameworks
- Certification in…