Staff Security Governance Engineer, Policies & Standards

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $168k - $238k / year

⏰ Full Time

🔴 Lead

🚔 Compliance

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Own the end-to-end lifecycle of GitLab's security policies, standards, procedures, and guidelines • Define and run the exception management process, including risk-based approvals, expiry tracking, and trend reporting • Run policy attestation and investigate non-adherence • Monitor emerging regulations and standards, including AI regulation, and update policies with Legal • Maintain mappings between policies and frameworks such as SOC 2, ISO 27001, ISO 42001, FedRAMP, and NIST CSF • Define KPIs for policy adherence and report trends to Security leadership • Run targeted internal assessments and drive remediation to closure • Support audits by coordinating evidence, testing, and remediation management • Support customer questionnaires and customer meetings • Implement automation and AI-assisted workflows for policy management, evidence collection, control monitoring, and assessments • Act as a technical and program leader across Security, Product, Legal, and Engineering • Mentor team members and help set the Security Governance roadmap

🎯 Requirements

• 10+ years in security governance, GRC, or IT risk • Hands-on ownership of a policy and standards lifecycle with measurable outcomes • Working knowledge of SOC 2, ISO 27001, ISO 42001, FedRAMP, and NIST CSF • Understanding of cloud, SaaS, and DevSecOps practices • Ability to write policy that engineers will follow • Risk-based mindset balancing compliance with real security risk • Demonstrated use of automation or AI to reduce manual GRC work • Strong written and verbal communication • Experience collaborating with Security, Product, Legal, and Engineering • Certifications such as CISSP, CISM, CISA, or similar are highly desirable

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave • Remote-first and asynchronous work environment