Senior Manager, Security Posture & Supply Chain Engineering

GitLab; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

GitLab is seeking a Senior Manager of the Security Posture Management team within the Product Security Department. You will lead the team securing GitLab's software factory, setting priorities, and enabling engineers to work securely at scale.

You will own direction, delivery, and growth of the team, driving governance, proactive supply chain security, and evidence for audits. This role emphasizes leadership, strategy, and measurable security impact.

Qualifications

• Experience managing a security or engineering team (hiring, performance, career development).
• Fluency in security posture management and software supply chain security at scale.
• Ability to translate security requirements into practical controls for engineering teams.
• Experience producing control evidence for audits, certifications, or maturity assessments.

Responsibilities

• Lead comprehensive, governed rollouts of GitLab's security capabilities across the estate.
• Set security baselines to accelerate engineering while ensuring secure defaults.
• Serve as Customer Zero for security features and feed adoption insights to Product & Engineering.
• Establish proactive software supply chain security and SBOM governance.
• Reduce systemic risk across groups and namespaces; manage risk registers and dashboards.
• Collaborate with Compliance to provide audit-ready evidence of controls.

Skills

Security leadership

Security posture management

Software supply chain security

Secure configuration

Hiring & career development

Cross-functional collaboration

Risk management

Job description

GitLab is seeking a Senior Manager of the Security Posture Management team within the Product Security Department. You will lead the team securing GitLab's software factory, setting priorities, and enabling engineers to work securely at scale.

You will own direction, delivery, and growth of the team, driving governance, proactive supply chain security, and evidence for audits. This role emphasizes leadership, strategy, and measurable security impact.