Senior Security Compliance Engineer, Public Sector

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, execute, and oversee GRC strategies and processes that align with FedRAMP, IRAP, and other regulatory and industry standards.

• Collaborate with highly regulated clients to comprehend compliance needs and deliver customized solutions.

• Lead and coordinate security evaluations, audits, and certification procedures.

• Assist GitLab Dedicated for Government in fulfilling FedRAMP continuous monitoring obligations.

• Work in conjunction with IT, Product, Engineering, Security, and Legal teams to embed GRC requirements into operations and technology frameworks.

• Create and uphold policies, procedures, controls, and other compliance-related documentation.

• Automate GRC processes and implement compliance-as-code or policy-as-code solutions utilizing scripting and coding expertise.

• Track regulatory modifications and industry developments to enhance the GRC program and ensure compliance.

• Provide GRC training and support to internal teams and clients.

• Act as a GRC subject matter expert, advising senior management and stakeholders.

⛳️ Requirements

• Valid proof of U.S. citizenship and residency.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience in a relevant field.

• At least 5 years of experience in GRC, cybersecurity, or a related domain, particularly in highly regulated industries.

• Demonstrated experience in achieving and maintaining security certifications such as FedRAMP, CMMC, SOC 2, IRAP, ISO 27001, among others.

• Strong comprehension of regulatory and compliance obligations for the public sector and highly regulated sectors.

• Knowledge of implementing compliance-as-code or policy-as-code, as well as automating control testing and evidence gathering.

• Fundamental understanding of FedRAMP requirements, processes, and documentation.

• Familiarity with cloud hyperscaler services like AWS and GCP.

• Exceptional analytical, problem-solving, and project management abilities.

• Strong communication and interpersonal skills, capable of collaborating with internal teams, auditors, clients, and regulatory entities.

• Ability to work autonomously and manage multiple projects concurrently in a fast-paced setting.

• Relevant certifications such as CISSP, CISM, CISA, or similar are highly advantageous.

🏝️ Benefits

• Benefits designed to support your health, financial needs, and overall well-being.

• Flexible Paid Time Off.

• Team Member Resource Groups.

• Equity Compensation & Employee Stock Purchase Plan.

• Growth and Development Fund.

• Parental Leave.