Remote IT SOX PMO Manager — Compliance & Controls

GitLab; United States; On-site; USD 115,000 - 194,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Remote-friendly culture

Equity Compensation & Employee Stock-P

Growth and Development Fund

Parental leave

Home office support

Job summary

GitLab is seeking an IT SOX PMO Manager to own IT-specific SOX compliance activities and serve as an SME for IT general and application controls. You’ll support the Senior Director and strengthen the IT SOX program, driving automation and practical control practices in a fast-growing SaaS environment.

The role collaborates across US Pacific and Eastern time zones, coordinating with auditors and internal teams to improve processes and ensure SOX readiness.

Qualifications

• IT audit and SOX compliance experience with ITGCs/ITACs and control frameworks.
• Experience with CO BIT and COSO framework.
• Certifications: CISA, CPA, CIA, or CISSP.

Responsibilities

• Act as IT SOX SME for ITGCs/ITACs and guide SOX compliance.
• Collaborate with the SOX PMO and other teams for SOX readiness and risk assessments.
• Maintain control documentation, flowcharts, and risk/control matrices.
• Lead IT control walkthroughs and coordinate remediation of deficiencies.
• Coordinate with auditors throughout the SOX cycle and support audit findings.
• Review SOC reports and oversee testing with contractor support.
• Partner with Internal Audit on SOX testing and automate controls where possible.
• Identify AI-related risks and prepare status reports and visuals.

Skills

IT SOX expertise

ITGCs & ITACs

COBIT

COSO

CISA

CPA

CIA

CISSP

SaaS industry

AuditBoard

AI in compliance

Cross-timezone collaboration

Education

Bachelor's degree in IT/CS/accounting

Tools

AuditBoard

Job description

GitLab is seeking an IT SOX PMO Manager to own IT-specific SOX compliance activities and serve as an SME for IT general and application controls. You’ll support the Senior Director and strengthen the IT SOX program, driving automation and practical control practices in a fast-growing SaaS environment.

The role collaborates across US Pacific and Eastern time zones, coordinating with auditors and internal teams to improve processes and ensure SOX readiness.