Senior Manager, Security Posture & Supply Chain (Remote)

GitLab; United States; Remote; CAD 239,000 - 349,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Equity Compensation & ESPP

Growth and Development Fund

Parental Leave

Team Member Resource Groups

Job summary

GitLab is seeking a Senior Manager for the Security Posture Management (SPM) team. You will lead a high-impact group responsible for securing GitLab’s software factory, driving governance, secure defaults, and proactive supply chain security.

You’ll translate security requirements into actionable controls and influence product roadmaps. You will partner with Compliance and Engineering to ensure audits, certifications, and maturity assessments are met while scaling adoption across the

Qualifications

• Experience leading security or engineering teams including hiring and career development.
• Ability to guide prioritization across security posture management and supply chain security.
• Proven track record in governance, controls, and audit readiness.

Responsibilities

• Lead governed rollouts of security capabilities across GitLab projects.
• Define secure defaults and enable fast engineering without compromising security.
• Serve as Customer Zero, gathering adoption feedback for product roadmaps.
• Establish proactive software supply chain security as a core capability.
• Manage risk and governance across multiple groups and namespaces.
• Own the Product Security Risk Register and metrics dashboards.

Skills

Security leadership

Security posture management

Software supply chain security

Governance & controls

Strategic planning

Tools

SBOM governance

Audit readiness

Job description

GitLab is seeking a Senior Manager for the Security Posture Management (SPM) team. You will lead a high-impact group responsible for securing GitLab’s software factory, driving governance, secure defaults, and proactive supply chain security.

You’ll translate security requirements into actionable controls and influence product roadmaps. You will partner with Compliance and Engineering to ensure audits, certifications, and maturity assessments are met while scaling adoption across the