Senior Security Compliance Engineer, Public Sector - GitLab

About the Role

GitLab is seeking a Senior Security Compliance Engineer to join our Public Sector Compliance team. You will play a critical role in advancing customer trust by executing our compliance roadmap, specifically supporting GitLab Dedicated and GitLab Dedicated for Government SaaS offerings.

Note: Due to government requirements, this position is restricted to United States citizens based in the United States.

Key Responsibilities

• GRC Strategy: Develop and manage GRC processes to support standards like FedRAMP, IRAP, SOC 2, and ISO 27001.
• Customer Engagement: Partner with highly regulated customers to provide tailored compliance solutions.
• Audit Management: Lead security assessments, audits, and certification processes from start to finish.
• Continuous Monitoring: Support ongoing FedRAMP continuous monitoring commitments for government offerings.
• Automation: Utilize scripting and coding skills to implement compliance-as-code and policy-as-code solutions.
• Cross-functional Collaboration: Work with IT, Product, Engineering, and Legal to integrate compliance requirements into the technology stack.
• Documentation: Maintain comprehensive policies, procedures, and control documentation.

What You’ll Bring

• Citizenship: Valid proof of US citizenship and residency.
• Experience: Minimum 5 years in GRC, cybersecurity, or related fields within highly regulated industries.
• Technical Expertise: Proven track record with FedRAMP, CMMC, SOC 2, IRAP, or ISO 27001.
• Cloud Knowledge: Familiarity with cloud hyperscalers (AWS, GCP, etc.).
• Automation Skills: Experience with compliance-as-code and automating control testing.
• Soft Skills: Excellent analytical, project management, and communication skills.
• Education: Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience.
• Preferred: Certifications such as CISSP, CISM, or CISA.

Why GitLab?

• Flexible Paid Time Off
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Comprehensive health, finance, and well-being benefits
• Parental Leave