Remote Security Assurance Engineer (SOX/AI Governance)

GitLab Inc.; Northern (KY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

GitLab Inc. seeks a Security Compliance professional to own IT controls across the corporate and product environments. You design and test controls for SOX ITGC, SOC 2, ISO 27001, and NIST CSF, ensuring evidence for audits and contractual commitments.

You will drive AI governance, standardize controls for cloud-native stacks, and partner with Governance, Risk, Legal and Privacy to uphold policy adherence and assurance across the company.

Qualifications

• BA/BS in business or technology; Big 4 exposure is a plus.
• Proven experience testing controls against COSO, COBIT, NIST CSF, ISO 27001, SOC 2, SOX ITGC.
• Experience with SaaS and cloud-native stacks; IAM basics, SSO/SCIM/RBAC.
• Ability to communicate with auditors, Legal, Privacy, and executives.

Responsibilities

• Design, document, and maintain IT General Controls and security controls.
• Test controls for design and operating effectiveness across regulatory and contractual requirements.
• Map shared controls to support multiple obligations (SOX, SOC 2, ISO 27001, NIST CSF, PCI-DSS, privacy).
• Serve as a compliance point of contact across IT, Security, Engineering, and Finance.
• Define acceptable use of AI, assess tools for control impact, and ensure evidentiary standards.
• Run recurring compliance monitoring: access reviews, privileged access, and change management.
• Review system implementations pre-go-live for control readiness; advise early.
• Manage SOX ITGC testing and certification with internal/external auditors; automate collection.
• Identify and remediate control deficiencies; improve compliance processes and reporting.

Skills

IT compliance

Security compliance

IT audit

Information security

Big 4 experience

COSO / COBIT

NIST CSF

ISO 27001

SOC 2

SOX ITGC

SSO

SCIM

RBAC

Privileged access

AI governance

Policy adherence

Education

BA/BS in business or technology

Job description

GitLab Inc. seeks a Security Compliance professional to own IT controls across the corporate and product environments. You design and test controls for SOX ITGC, SOC 2, ISO 27001, and NIST CSF, ensuring evidence for audits and contractual commitments.

You will drive AI governance, standardize controls for cloud-native stacks, and partner with Governance, Risk, Legal and Privacy to uphold policy adherence and assurance across the company.