Staff Security Governance Engineer, Policies & Standards
Core
Own the end-to-end lifecycle of GitLab's security policies, standards, and procedures, translating emerging regulations into actionable requirements for engineering and product teams.
Role type
Staff Security Governance Engineer (Policies & Standards)
Builds
Security policy libraries, exception management processes, and automated governance workflows.
Domain
Cybersecurity, GRC, Regulatory Compliance, DevSecOps
Required skills
Security governance lifecycle management, Regulatory impact assessment, Framework mapping (SOC 2, ISO 27001, NIST CSF), Risk-based decision making, Policy automation, Cross-functional influence
Preferred skills
CISSP, CISM, CISA, AI-assisted workflow implementation, Policy as Code
Technologies
GitLab, NIST CSF, ISO 27001, ISO 42001, FedRAMP, SOC 2, PCI-DSS
Responsibilities
Draft, review, and publish security policies and standards; Monitor emerging regulations and update policies accordingly; Define KPIs for policy adherence and run internal assessments; Support audit activities and customer trust initiatives; Implement automation and AI for policy management; Mentor team members and set the governance roadmap.
Seniority
Staff, individual contributor with broad scope and technical leadership
