Senior Internal Auditor, Technology - GitLab

About the Role

As a Senior Internal Auditor at GitLab, you will assess risk and strengthen controls across a complex technology landscape, including multi-cloud infrastructure, AI/ML systems, and modern development practices. This role is pivotal in supporting our SOX compliance program while partnering with Engineering, IT Operations, and Security teams to build practical, effective controls.

What You’ll Do

• Audit Execution: Lead technology audits covering SOX compliance, AWS/GCP cloud infrastructure, application controls, cybersecurity, and DevSecOps practices.
• Control Design: Design and test IT general controls (ITGC), application controls, and entity-level controls.
• SOX Support: Manage the IT SOX program lifecycle, from risk-based planning and process walkthroughs to testing and external co-source coordination.
• Documentation: Maintain high-quality audit documentation, including risk and control matrices, process flows, and business impact assessments.
• Remediation: Partner with process owners to develop corrective action plans and validate the effectiveness of remediations.
• Innovation: Utilize data analytics, automation, and generative AI tools to enhance audit efficiency, coverage, and quality.
• Collaboration: Work with cross-functional teams to evaluate emerging risks and new system implementations.

What You’ll Bring

• Experience executing technology audits and risk management in complex environments.
• Proven track record supporting IT SOX programs and testing IT controls.
• Proficiency in frameworks such as COBIT, NIST, ITIL, ISO 27001, and COSO.
• Strong knowledge of cloud security, cybersecurity fundamentals (Zero Trust, encryption, IAM), and modern development practices (Agile/DevOps).
• Excellent communication skills with the ability to translate technical findings into business impact for diverse stakeholders.
• Bachelor’s degree in Accounting, IT, Computer Science, or Finance.
• Active professional certification (CPA, CIA, CISA, CISSP, CISM, or CRISC).

Why GitLab?

GitLab is the intelligent orchestration platform for DevSecOps. We embrace AI as a core productivity multiplier and foster a high-performance culture driven by continuous knowledge exchange and collaboration.