Public Sector GRC & Security Compliance Lead

GitLab; United States; On-site; USD 139,000 - 196,000; Full time

Benefits offered by this job

Benefits to support health and well‑be

Flexible Paid Time Off

Equity Compensation & Stock Purchase

Growth and Development Fund

Parental Leave

Job summary

GitLab is seeking a Senior Security Compliance Engineer to strengthen the Public Sector Compliance team. You will drive GRC strategies across FedRAMP, IRAP, and other standards, partnering with highly regulated clients in the U.S. and globally to ensure framework alignment and continuous monitoring.

The role requires US citizenship, strong GRC background, and experience implementing compliance-as-code. You will collaborate with IT, Product, Security, Legal, and auditors to advance secure,

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• Minimum of 5 years in GRC, cybersecurity, or similar roles in regulated industries.
• Experience achieving and maintaining security certifications (FedRAMP, CMMC, SOC 2, IRAP, ISO 27001).
• Familiarity with compliance-as-code and automating control testing.

Responsibilities

• Develop and manage GRC strategies to support regulatory compliance (FedRAMP, IRAP, etc.).
• Collaborate with regulated customers to tailor compliance solutions.
• Lead security assessments, audits, and certification processes.
• Support FedRAMP continuous monitoring efforts for GitLab Dedicated for Government.
• Integrate GRC requirements across IT, Product, Engineering, Security, and Legal.

Skills

GRC

FedRAMP

CMMC

SOC 2

IRAP

ISO 27001

Policy-as-code

Cloud proficiency

Communication skills

Project management

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

GRC tools

Policy-as-code tooling

Job description

GitLab is seeking a Senior Security Compliance Engineer to strengthen the Public Sector Compliance team. You will drive GRC strategies across FedRAMP, IRAP, and other standards, partnering with highly regulated clients in the U.S. and globally to ensure framework alignment and continuous monitoring.

The role requires US citizenship, strong GRC background, and experience implementing compliance-as-code. You will collaborate with IT, Product, Security, Legal, and auditors to advance secure,