Ask HN: What are good resources for managing the security of a startup?

I come from a research/architecture background in security and pivoting to a more operational security role (managing compliance, audits, annual pentests, vulnerability scanning, intrusion detection…) Is there any awesome list of tools/integrations and resources to make that job easier? Also if there are articles for managing security processes at startup size? For example, IDS require quite a lot of manpower which we don’t have…