Senior Security Compliance Engineer, Public Sector

📋 Description

• Develop, implement, and manage GRC strategies and processes to support compliance with various
• Work closely with highly regulated customers to understand their unique compliance requirements and
• Lead and manage security assessments, audits, and certification processes, ensuring timely and
• Support GitLab Dedicated for Government’s ongoing FedRAMP continuous monitoring commitments.
• Collaborate with cross-functional teams, including IT, Product, Engineering, Security, and Legal
• Develop and maintain comprehensive documentation, including policies, procedures, and controls, to

🎯 Requirements

• Valid proof of US citizenship and residency.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent
• Minimum of 5 years of experience in GRC, cybersecurity, or a related field, with a focus on highly
• Proven experience achieving and maintaining security certifications such as FedRAMP, CMMC, SOC 2
• Strong understanding of regulatory and compliance requirements for the public sector and highly
• Familiarity with implementing compliance-as-code or policy-as-code, and automating control testing

🎁 Benefits

• Flexible Paid Time Off
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave