Global Security Awareness & Human Risk Lead

GitLab; United States; On-site; USD 203,000 - 275,000; Full time

Benefits offered by this job

Health benefits

Remote-friendly

Equity

Growth & development fund

Parental leave

Job summary

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to own the global security awareness program within the Security Assurance team. You will drive measurable reductions in human-related risk by embedding security culture across the organization.

You’ll lead phishing simulations end-to-end, design content for annual, new-hire, and role-based training, develop multimedia materials, and manage training platforms and vendor relationships to maximize impact.

Qualifications

• 10+ years building or scaling global awareness programs in a large, distributed enterprise.
• SSAP certification or equivalent demonstrated expertise.
• Experience running enterprise-scale phishing programs and awareness campaigns.
• Proven vendor evaluation, selection and cost/value analysis for training vendors.

Responsibilities

• Own and evolve the global security awareness program across multiple content types.
• Lead phishing simulations end to end including design, deployment and follow-up.
• Apply behavior-change principles to reinforce secure habits across the organization.
• Build security culture through campaigns and ongoing engagement.

Skills

Security awareness strategy

Phishing programs

Vendor management

Instructional design

Security policy development

Audit support

Education

SSAP certification

Tools

Phishing platforms

Video production tools

Training platforms

Job description

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to own the global security awareness program within the Security Assurance team. You will drive measurable reductions in human-related risk by embedding security culture across the organization.

You’ll lead phishing simulations end-to-end, design content for annual, new-hire, and role-based training, develop multimedia materials, and manage training platforms and vendor relationships to maximize impact.