Remote Senior Security GRC Engineer: FedRAMP/ISO 27001

GitLab Inc.; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

GitLab is seeking a Senior Security Compliance Engineer for Public Sector to advance the compliance program, support FedRAMP/AWS, and drive certification efforts across government customers.

You will lead GRC initiatives, partner with Product, IT, Security, and Legal teams, and ensure continuous monitoring and policy‑as‑code adoption for regulated environments. Remote role in the United States with citizen requirements.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field.
• Minimum of 5 years in GRC, cybersecurity, or related field, with focus on highly regulated industries.
• Proven experience achieving and maintaining security certifications such as FedRAMP, CMMC, SOC 2, IRAP, ISO 27001.
• Strong understanding of regulatory and compliance requirements for the public sector and highly regulated verticals.
• Familiarity with implementing compliance‑as‑code or policy‑as‑code, and automating control testing and evidence collection.
• Basic knowledge of FedRAMP requirements, processes, and documentation.
• Familiarity with cloud hyperscalers services (AWS, GCP).

Responsibilities

• Develop, implement, and manage GRC strategies and processes for FedRAMP, IRAP, and other standards.
• Understand clients’ unique compliance requirements and tailor solutions for adherence.
• Lead security assessments, audits, and certification processes to ensure timely completion.
• Support ongoing FedRAMP continuous monitoring commitments.
• Collaborate with IT, Product, Engineering, Security, and Legal to integrate GRC into operations.
• Create and maintain policies, procedures, and controls for compliance initiatives.
• Automate GRC processes with compliance‑as‑code or policy‑as‑code solutions.
• Monitor regulatory changes and industry trends to improve the GRC program.
• Provide training and guidance on GRC topics to internal teams and customers.
• Act as SME on GRC issues for senior management.

Skills

GRC

FedRAMP

CMMC

SOC 2

IRAP

ISO 27001

Policy-as-code

Compliance-as-code

Regulatory knowledge

Project management

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Job description

GitLab is seeking a Senior Security Compliance Engineer for Public Sector to advance the compliance program, support FedRAMP/AWS, and drive certification efforts across government customers.

You will lead GRC initiatives, partner with Product, IT, Security, and Legal teams, and ensure continuous monitoring and policy‑as‑code adoption for regulated environments. Remote role in the United States with citizen requirements.