Staff Security Governance Engineer, Policies & Standards

Owns GitLab's security policies and standards as a staff individual contributor on the Security Governance team within Security Assurance, reporting to the Director, Customer Trust & Security Governance. The engineer runs the full policy lifecycle, the exception process and attestation, maps policies to SOC 2, ISO 27001, ISO 42001, FedRAMP and NIST CSF, tracks new rules such as the EU AI Act with Legal, measures adherence, supports audits and customer questionnaires, and builds automation and policy-as-code with GRC Engineering.

GitLab wants a decade or more of governance, GRC or IT risk work with real ownership of a policy library, hands-on ISMS and ISO 27001 certification experience, and proven use of automation or AI to cut manual work. CISSP, CISM or CISA is valued. Remote in the United States.