Principal Security GRC & Legal Assurance Lead

Royper Royco LLC; United States; Remote; USD 203,000 - 285,000; Full time

Benefits offered by this job

Flexible PTO

Equity Compensation & Employee Stock-P

Growth and Development Fund

Parental Leave

Team Member Resource Groups

Job summary

GitLab, a remote-first security-driven software company in the United States, is seeking a Principal Security GRC Manager, Legal Assurance. You will tackle complex customer security challenges at the intersection of architecture and business needs, guiding security controls and contract terms for enterprise customers.

You’ll collaborate with Legal, Sales, Product, and Procurement to negotiate terms, create security content, and lead assurance efforts.

Qualifications

• 10+ years of information security experience, including customer-facing roles.
• Deep expertise in security frameworks and standards such as SOC 2, ISO 27001/27017/27018/42001, FedRAMP, NIST CSF.
• Expertise in law and regulation such as GDPR, CCPA, DORA, EU AI Act.
• Proven track record of contract negotiation and security/privacy agreement reviews.
• Exceptional written and verbal communication skills with ability to translate complex technical concepts for diverse audiences.
• Experience creating security content (blogs, whitepapers, presentations).
• Strong understanding of cloud security, SaaS security models, and DevSecOps practices.
• Experience working cross-functionally with Sales, Legal, Product, and Engineering teams.
• Ability to balance security risk with business objectives.
• Certifications such as CISSP, CISA, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, or CIPP/CIPM.

Responsibilities

• Perform contract reviews for customer agreements and vendor relationships.
• Analyze security and compliance clauses in legal documents.
• Provide risk-based remediation guidance for contractual security requirements.
• Partner with Legal, Sales, Product, and Procurement to negotiate security terms.
• Join customer meetings to advise on GitLab’s security practices and controls.
• Build templates, playbooks, and training to accelerate negotiations.
• Support assurance activities through our Service Desk and risk reviews.
• Create security content and participate in thought leadership activities.
• Stay current with regulatory changes and advise on impact to agreements.
• Mentor Security Assurance team members.

Skills

Security governance

Contract reviews

Regulatory knowledge

Cloud security

SaaS security

DevSecOps

Cross-functional collaboration

Security content creation

Communication

Certifications (CISSP/CISA/etc)

Job description

GitLab, a remote-first security-driven software company in the United States, is seeking a Principal Security GRC Manager, Legal Assurance. You will tackle complex customer security challenges at the intersection of architecture and business needs, guiding security controls and contract terms for enterprise customers.

You’ll collaborate with Legal, Sales, Product, and Procurement to negotiate terms, create security content, and lead assurance efforts.