Staff Security Governance Engineer, Policies & Standards
Core
Own the end-to-end lifecycle of GitLab's security policies, standards, and procedures, translating emerging regulations into actionable requirements for engineering and product teams.
Role type
Staff Security Governance Engineer (Policies & Standards)
Builds
Security policy libraries, exception management processes, and automated governance workflows. (via careerplan.io/jobs/8846277002-staff-security-governance-engineer-policies-standards-at-gitlab-inc)
Domain
Cybersecurity, GRC, Regulatory Compliance, DevSecOps
Required skills
Security governance lifecycle management, Regulatory impact assessment, Framework mapping (SOC 2, ISO 27001, NIST CSF), Risk-based decision making, Policy automation, Cross-functional influence
Preferred skills
CISSP, CISM, CISA, AI-assisted workflow implementation, Policy as Code
Technologies
GitLab, NIST CSF, ISO 27001, ISO 42001, FedRAMP, SOC 2, PCI-DSS
Responsibilities
Draft, review, and publish security policies and standards; Monitor emerging regulations and update policies accordingly; Define KPIs for policy adherence and run internal assessments; Support audit activities and customer trust initiatives; Implement automation and AI for policy management; Mentor team members and set the governance roadmap.
Seniority
Staff, individual contributor with broad scope and technical leadership
