Remote Senior Security Compliance Engineer - Public Sector

GitLab

United States

Remote

USD 139,000 - 196,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Health benefits

Equity compensation & ESPP

Flexible PTO

Growth & development fund

Parental leave

Job summary

GitLab is seeking a Senior Security Compliance Engineer to advance the Public Sector Compliance program, driving FedRAMP, CMMC, IRAP, SOC 2, ISO 27001 strategies for US and international customers. You will lead audits, craft policy-as-code, and partner across teams to embed compliance into products and operations.

You must be a US citizen with 5+ years in GRC or cybersecurity, and be based in the United States to support Government-focused SaaS offerings.

Qualifications

Bachelor's degree in CS/IT/Cybersecurity or equivalent experience.
Minimum 5 years in GRC, cybersecurity, or related field.
Proven experience with FedRAMP, CMMC, SOC 2, IRAP, ISO 27001 and similar.
Strong understanding of public sector regulatory/compliance requirements.

Responsibilities

Develop, implement, and manage GRC strategies and processes for compliance with FedRAMP, IRAP, etc.
Collaborate with regulated customers to design tailored compliance solutions.
Lead security assessments, audits, and certification activities.
Support FedRAMP continuous monitoring for GitLab Dedicated for Government offerings.
Partner with IT, Product, Engineering, Security, and Legal to embed GRC in operations and tech stack.
Create and maintain policies, procedures, and controls for compliance initiatives.
Automate GRC processes using compliance-as-code or policy-as-code approaches.
Monitor regulatory changes and industry trends to improve the GRC program.