Senior Security Awareness & Human Risk Architect (Remote)

GitLab; Canada; Remote; CAD 289,000 - 392,000; Full time

Benefits offered by this job

Health insurance

Flexible Paid Time Off

Employee Resource Groups

Equity Compensation & Employee Stock�

Growth and Development Fund

Parental Leave

Job summary

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to own GitLab's global security awareness and education program, driving measurable reductions in human-related security risk and embedding a security culture across a fully remote organization.

You will lead the phishing simulation program end to end, apply behavior-change techniques, and collaborate with Security Assurance leadership to report on KPIs and outcomes.

Qualifications

• Minimum 10 years building or scaling global awareness and human-risk programs in large enterprises.
• SSAP certification or equivalent expertise in building, maintaining, and measuring mature awareness programs.
• Experience running enterprise-scale phishing programs and organization-wide awareness campaigns.
• Proven track record evaluating, selecting, consolidating, or replacing security training vendors with cost/value analysis.
• Instructional design capability for security training.
• Working knowledge of security policy development, audit support, and control evidence.

Responsibilities

• Own and evolve the global security awareness and education program across various content.
• Lead the phishing simulation program end to end: design, deployment, analysis, and follow-up.
• Apply behavior change principles to reinforce secure habits and address risk behaviors.
• Build and sustain security culture through learning campaigns and engagement.
• Produce multimedia awareness content, including video.
• Administer training and phishing platforms and manage program data and reporting.

Skills

Security awareness

Phishing programs

Vendor management

Instructional design

Security policy

Education

SSAP certification

Tools

Phishing platforms

Job description

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to own GitLab's global security awareness and education program, driving measurable reductions in human-related security risk and embedding a security culture across a fully remote organization.

You will lead the phishing simulation program end to end, apply behavior-change techniques, and collaborate with Security Assurance leadership to report on KPIs and outcomes.