Senior Security Compliance Engineer, Public Sector
Core
Senior Security Compliance Engineer supporting the Public Sector Compliance team to advance customer trust and execute the compliance roadmap for GitLab Dedicated and Government SaaS offerings.
Role type
Senior IC security compliance engineer
Builds
GitLab Dedicated and GitLab Dedicated for Government SaaS offerings
Domain
Public sector cybersecurity and regulatory compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC strategy implementation, security certification management (FedRAMP, CMMC, IRAP, SOC2, ISO 27001), compliance-as-code/policy-as-code, regulatory analysis, project management, cloud hyperscaler familiarity (AWS, GCP)
Preferred skills
CISSP, CISM, CISA certifications, scripting/coding for automation
Technologies
FedRAMP, CMMC, IRAP, SOC2, ISO 27001, AWS, GCP
Responsibilities
Develop and manage GRC strategies for regulatory standards; lead security assessments and audits; support FedRAMP continuous monitoring; collaborate with cross-functional teams to integrate GRC requirements; automate GRC processes via scripting; monitor regulatory changes; provide training and guidance on GRC topics.
Seniority
Senior, hands-on IC
