Remote Senior Security Awareness & Human Risk Strategist

GitLab; Canada; On-site; CAD 208,000 - 319,000; Full time

Job summary

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to lead the global security awareness and education program within the Security Assurance team. This strategic individual contributor role focuses on reducing human-related security risk and embedding a security culture across a distributed organization.

You’ll own content across annual, new-hire, role-based, and executive learning, run phishing simulations end to end, and apply behavior-change principles to reinforce secure

Qualifications

• Minimum 10 years building global awareness programs in large enterprises.
• Experience running enterprise phishing programs and awareness campaigns.
• Experience evaluating and consolidating security training vendors.

Responsibilities

• Own and evolve global security awareness programs across annual, new-hire, role-based and executive content.
• Lead phishing simulations end to end: design, deployment, analysis, follow-up.
• Apply behavior-change principles to reinforce secure habits.
• Build security culture through campaigns and ongoing engagement.
• Produce multimedia content and administer training platforms with end-to-end reporting.
• Define KPIs and report to Security Assurance leadership.
• Manage vendor relationships for training and video production.
• Collaborate on security policies, standards, and audit evidence.

Skills

SSAP certification

Phishing programs

Security awareness

Vendor management

Security policy development

Influence strategy

Remote collaboration

Job description

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to lead the global security awareness and education program within the Security Assurance team. This strategic individual contributor role focuses on reducing human-related security risk and embedding a security culture across a distributed organization.

You’ll own content across annual, new-hire, role-based, and executive learning, run phishing simulations end to end, and apply behavior-change principles to reinforce secure