Manager, SOX PMO - Business Process

About the Role

As Manager, SOX PMO - Business Process, you will lead Sarbanes-Oxley (SOX) compliance for assigned business processes as part of GitLab's second line. This is an advisory role focused on deep process understanding, risk evaluation, and control design rather than repeatable testing. You will help control owners remediate controls, partner with IT SOX PMO on system readiness, and guide teams in adopting AI agents while maintaining compliance.

What You’ll Do

• Lead SOX Compliance: Act as the second-line subject matter expert for assigned business processes, advising control owners and resolving open questions.
• Risk Management: Monitor risks from changing processes and products; contribute to annual SOX risk assessments and scoping.
• Control Evaluation: Evaluate control deficiencies, identify root causes, and prepare severity assessments and remediation plans.
• Technical Documentation: Prepare auditor-ready memos on sampling, scoping, and control rationalization.
• Stakeholder Management: Lead business walkthroughs and coordinate with Internal Audit and external auditors.
• AI Integration: Advise on controls for AI-enabled processes and leverage AI tools to automate SOX workflows.
• Cross-functional Collaboration: Partner with Finance, Operations, Legal, HR, Sales, Engineering, and IT to maintain effective business controls.

What You’ll Bring

• Experience: Hands-on SOX and internal controls experience (design, remediation, deficiency evaluation) in the software or technology industry. Big Four risk advisory or assurance experience is a plus.
• Credentials: Bachelor's degree in Accounting, Finance, or related field; active CPA (strongly preferred) or CIA credential.
• Framework Knowledge: Strong understanding of SOX requirements and COSO framework.
• Analytical Skills: Professional judgment and skepticism; ability to solve ambiguous, novel problems independently.
• Communication: Clear written and verbal communication skills; ability to defend positions to senior stakeholders and external auditors.
• Tech-Forward: Practical approach to adopting new technologies and AI tools while maintaining compliance.

Team & Culture

This role reports to the Senior Director, SOX PMO. You will need to be available to collaborate with teammates during core US Pacific (PT) and Eastern (ET) business hours.