Senior Security Assurance Engineer — SOX, AI Governance

Jackalope Digital LLC; Northern (KY); Hybrid; USD 139,000 - 196,000; Full time

Benefits offered by this job

Flexible PTO

Equity Compensation

Employee Stock Purchase Plan

Growth & Development Fund

Parental Leave

Job summary

GitLab is seeking an experienced IT compliance professional to own security and control programs across its enterprise ecosystem. You will drive SOX ITGC, SOC 2, and other assurance activities while partnering with Security Governance, Legal, Privacy, and Engineering teams.

You will also shape AI governance, policy alignment, and evidence standards, ensuring robust control coverage for cloud-native and SaaS environments. Remote role with competitive compensation.

Qualifications

• 5+ years in IT compliance, security compliance, IT audit, information security, or IT with degree or equivalent experience.
• Experience testing controls against COSO, COBIT, NIST CSF, ISO 27001, SOC 2, SOX ITGC.
• Experience with SaaS/cloud stacks and identity management.
• Ability to collaborate with auditors, Legal, Privacy, and engineering teams.
• Familiarity with AI governance and enterprise policy considerations.

Responsibilities

• Design, document, and maintain IT General Controls and security controls across the in-scope estate.
• Map controls to serve multiple obligations (SOX, SOC 2, ISO standards, NIST, PCI-DSS, privacy, contracts).
• Serve as compliance point of contact for IT, Corporate Security, Engineering, and Finance teams.
• Set standards for AI use controls and evidence requirements; assess tools and integrations.
• Collaborate on policy content and attestation with governance functions.
• Run recurring compliance monitoring (access reviews, change management, baselines).
• Advise on control requirements early in design and assist with go-live readiness.
• Manage SOX ITGC testing and audit evidence collection; drive remediation.
• Identify deficiencies and drive process improvements across the estate.

Skills

IT compliance

Auditing (SOX/SOC 2)

Cloud/SaaS assessment

IAM basics (SSO, RBAC)

AI governance knowledge

Education

BA/BS in business or technology

Job description

GitLab is seeking an experienced IT compliance professional to own security and control programs across its enterprise ecosystem. You will drive SOX ITGC, SOC 2, and other assurance activities while partnering with Security Governance, Legal, Privacy, and Engineering teams.

You will also shape AI governance, policy alignment, and evidence standards, ensuring robust control coverage for cloud-native and SaaS environments. Remote role with competitive compensation.