Senior Security Compliance Engineer, Public Sector

🕒 September 4

🇺🇸 United States – Remote

💵 $139.2k - $196k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Develop, implement, and manage GRC strategies and processes supporting FedRAMP, IRAP, and other regulatory and industry standards • Work with highly regulated customers to understand compliance requirements and provide tailored solutions • Lead and manage security assessments, audits, and certification processes • Support GitLab Dedicated for Government’s FedRAMP continuous monitoring commitments • Collaborate with IT, Product, Engineering, Security, and Legal teams to integrate GRC requirements into operations and technology • Develop and maintain policies, procedures, controls, and other compliance documentation • Automate GRC processes and implement compliance-as-code or policy-as-code solutions using scripting/coding skills • Monitor regulatory changes and industry trends to improve the GRC program and maintain compliance • Provide GRC training and guidance to internal teams and customers • Serve as a GRC subject matter expert and advise senior management and stakeholders

🎯 Requirements

• Valid proof of US citizenship and residency • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience in a related field • Minimum of 5 years of experience in GRC, cybersecurity, or a related field, with a focus on highly regulated industries • Proven experience achieving and maintaining security certifications such as FedRAMP, CMMC, SOC 2, IRAP, ISO 27001, and others • Strong understanding of regulatory and compliance requirements for the public sector and highly regulated verticals • Familiarity with implementing compliance-as-code or policy-as-code, and automating control testing and evidence collection • Basic knowledge of FedRAMP requirements, processes, and documentation • Familiarity with cloud hyperscaler services such as AWS and GCP • Excellent analytical, problem-solving, and project management skills • Strong communication and interpersonal skills, with the ability to collaborate with internal teams, auditors, customers, and regulatory bodies • Ability to work independently and manage multiple projects simultaneously in a fast-paced environment • Relevant certifications such as CISSP, CISM, CISA, or similar are highly desirable

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave