Senior Security Compliance Engineer, Public Sector

Overview

Senior Security Compliance Engineer supporting GitLab’s Public Sector Compliance team.

What you'll do

• Develop, implement, and manage GRC strategies and processes for standards including FedRAMP and IRAP.
• Work with highly regulated customers to understand compliance requirements and tailor solutions.
• Lead security assessments, audits, and certification processes to ensure timely completion.
• Support GitLab Dedicated for Government’s FedRAMP continuous monitoring commitments.
• Collaborate across IT, Product, Engineering, Security, and Legal to integrate GRC requirements.
• Automate GRC processes using compliance-as-code or policy-as-code.

What you'll need

• Minimum 5 years of experience in GRC, cybersecurity, or a related field focused on highly regulated industries.
• Proven experience achieving and maintaining security certifications including FedRAMP, CMMC, SOC 2, IRAP, and ISO 27001.
• Valid proof of U.S. citizenship and residency.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.
• Familiarity with implementing compliance-as-code/policy-as-code and automating control testing and evidence collection.
• Basic knowledge of FedRAMP requirements, processes, and documentation.

Details

• Remote, United States.