Global Security Awareness Leader & Phishing Architect

GitLab; United States; On-site; USD 203,000 - 275,000; Full time

Benefits offered by this job

Flexible PTO

ERG Groups

Equity + ESPP

Development Fund

Parental Leave

Job summary

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to own the global security awareness and education program and drive measurable reductions in human-related security risk. This is an all-remote role within GitLab’s Security Assurance team, with a focus on building a mature, measurable program across the enterprise.

The candidate will lead phishing simulations, develop engaging learning campaigns, and coordinate with Security Risk and other functions to ensure evidence-based

Qualifications

• 10+ years building or scaling global awareness programs in a large enterprise.
• SSAP certification or equivalent expertise in mature awareness programs.
• Experience running enterprise-scale phishing programs and organization-wide awareness campaigns.
• Experience evaluating, selecting, consolidating, or replacing security training vendors with cost/value analysis.
• Instructional design capability.
• Knowledge of security policy development, audit support, and control evidence.
• Ability to influence enterprise strategy across technical and non-technical teams without formal authority.
• Ability to make complex security topics practical in a fully remote organization.

Responsibilities

• Own and evolve the global security awareness and education program across all learning content.
• Lead the phishing simulation program end to end: design, deployment, analysis, and follow-up.
• Apply behavior-change principles to reinforce secure habits and address priority risk behaviors.
• Build security culture through learning campaigns, Security Awareness Month, and ongoing engagement.
• Produce multimedia awareness content, including video and training materials.
• Administer training and phishing platforms, managing data and reporting end to end.
• Define and report performance indicators to Security Assurance leadership.
• Manage vendor relationships for phishing, training, and video production.
• Lead market and competitor evaluations, renewal decisions, and cost negotiations; advise on in-house builds when warranted.
• Collaborate on and maintain security policies, standards, and procedures.
• Coordinate audit evidence and demonstrate control effectiveness.
• Track remediation of identified gaps to closure.

Skills

Security awareness program

Phishing programs

Vendor evaluation

Instructional design

Stakeholder influence

Remote collaboration

Education

SSAP certification

Job description

GitLab is seeking a Principal Security Awareness & Human Risk Engineer to own the global security awareness and education program and drive measurable reductions in human-related security risk. This is an all-remote role within GitLab’s Security Assurance team, with a focus on building a mature, measurable program across the enterprise.

The candidate will lead phishing simulations, develop engaging learning campaigns, and coordinate with Security Risk and other functions to ensure evidence-based