Senior Security Assurance Engineer

GitLab
United States
Workplace: RemoteFull timeUSD 139,200 - 196,000 annuallyFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsEducation: bachelorsSkills: ["Written communication","Verbal communication","Cross-functional collaboration","Stakeholder management","Risk assessment"]

Design, document, and maintain IT General Controls and security controls that cover GitLab’s in-scope estate, then test them for design and operating effectiveness. Map shared controls to multiple assurance consumers (SOX, SOC 2, ISO, NIST CSF, PCI-DSS, privacy, and customer commitments) using a single evidence base. Serve as a cross-functional compliance liaison and help set governed standards for AI usage across corporate and business systems.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
GitLab
GitLab
2 days ago

Senior Security Assurance Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 8 hours agoStatus: Live

Job Summary

Design, document, and maintain IT General Controls and security controls that cover GitLab’s in-scope estate, then test them for design and operating effectiveness. Map shared controls to multiple assurance consumers (SOX, SOC 2, ISO, NIST CSF, PCI-DSS, privacy, and customer commitments) using a single evidence base. Serve as a cross-functional compliance liaison and help set governed standards for AI usage across corporate and business systems.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Design, document, maintain, and test IT General Controls and security controls across the in-scope estate for design and operating effectiveness against regulatory, contractual, and policy requirements.
  • •Map shared controls once and test them to satisfy multiple obligations simultaneously (SOX, SOC 2, ISO 27001, ISO 42001, NIST CSF, PCI-DSS, privacy regulations, and customer commitments).
  • •Act as the compliance point of contact and liaison for IT, Corporate Security, Engineering, and Finance teams supporting Security Governance, Security Risk, Internal Audit, the SOX PMO, Legal, and Privacy.
  • •Help set standards for governed use of AI across corporate and business systems by assessing tools, agents, and integrations for control impact, acceptable use, evidence, and escalation where required.
  • •Run recurring compliance monitoring (access reviews, privileged access, segregation of duties, change management, configuration baselines) and manage SOX ITGC testing/evidence collection for internal and external audits.

Pay and Benefits

Salary: USD 139,200 - 196,000 annually
Perks:Paid LeaveParental LeaveEquityLearning Budget

Key Requirements

  • •5+ years in IT compliance, security compliance, IT audit, information security, or IT, with a BA/BS in business or technology (or equivalent experience).
  • •Experience testing and documenting controls against frameworks such as COSO, COBIT, NIST CSF, ISO 27001, SOC 2, and SOX ITGC, with internal or external auditors.
  • •Experience assessing controls in SaaS and cloud-native application stacks, beyond traditional on-premise systems.
  • •Working knowledge of identity and access management (SSO, SCIM, RBAC, privileged access) and joiner/mover/leaver processes.
  • •Demonstrated credibility in written/verbal communication with senior leadership, engineering, auditors, and legal.
Experience:5+ years
Education:Bachelor's
Skills:Written communicationVerbal communicationCross-functional collaborationStakeholder managementRisk assessment
Certifications:CISACISSPCRISCCISM
Tech Stack:GitLabSOX ITGCSOC 2ISO 27001ISO 42001NIST CSFNIST AI RMFCOSOCOBITPCI-DSSSSOSCIMRBAC

Company Brief

GitLab
Provides a single application for the complete DevSecOps lifecycle, offering source code management, CI/CD, security, and collaboration tools to help teams deliver software faster and more securely.
Industry: Developer Tools
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn