Senior Security Assurance Engineer

Overview

Senior Security Assurance Engineer in GitLab’s Security Assurance organization, responsible for designing, testing, and evidencing controls that protect the business.

What you'll do

• Design, document, and maintain IT General Controls and security controls and test design/operating effectiveness.
• Map shared controls once to satisfy multiple assurance and compliance obligations.
• Act as a compliance point of contact and liaison across IT, Corporate Security, Engineering, and Finance teams.
• Set standards and control expectations for governed use of AI across corporate and business systems.
• Run recurring compliance monitoring such as access reviews and change management testing on defined cadences.
• Manage SOX ITGC testing and certification requests and direct evidence collection for external audits.
• Identify and lead remediation of control deficiencies and recommend improvements to compliance processes and reporting.

What you'll need

• 5+ years in IT compliance, security compliance, IT audit, information security, or information technology.
• BA/BS in a business or technology field or equivalent experience.
• Experience testing controls and documenting against frameworks such as COSO, COBIT, NIST CSF, ISO 27001, SOC 2, and SOX ITGC.
• Experience assessing controls in SaaS and cloud-native application stacks.
• Working knowledge of identity and access management including SSO, SCIM, RBAC, and joiner/mover/leaver processes.
• Familiarity with AI governance concepts and control questions for AI tools, agents, and integrations.
• Exceptional written and verbal communication across senior leadership, engineering teams, auditors, and legal.

Details

• Location: Remote, United States.
• Listed base salary range (United States): $139,200–$196,000 USD.