Senior Manager Customer Trust and Security Governance
GitLab is an AI-powered DevSecOps platform that unifies the entire software development lifecycle into a single application. It helps development, security, and operations teams to collaborate and deliver software more efficiently, with security integrated at every step. The platform is trusted by millions of users and a majority of the Fortune 100.
About GitLab Inc.
GitLab is a comprehensive, AI-powered DevSecOps platform that streamlines the entire software delivery process by unifying the development lifecycle into a single application. It integrates source code management, CI/CD, security, and monitoring to help teams build, secure, and operate software more efficiently. Key features include automated security scans built into the development pipeline and AI-driven tools like GitLab Duo for code suggestions and chat, which enhance developer productivity. GitLab serves a diverse client base, from startups and open-source projects to large enterprises, including over half of the Fortune 100. The platform aims to reduce complexity, accelerate delivery cycles, and strengthen security and compliance for its users.
Skills
About the Role
You will lead customer trust activities, including contract reviews, security questionnaires, requests for proposals, and customer and vendor security inquiries. You will establish operating practices, negotiate security-related contract terms, manage escalations, and improve templates, playbooks, policies, standards, metrics, reporting, awareness, automation, and AI-enabled workflows.
Requirements
- Extensive experience leading security governance or customer-facing security programs in a complex cross-functional environment.
- Knowledge of SOC 2, ISO 27001, FedRAMP, GDPR, and NIST.
- Ability to review and negotiate security and privacy contract terms.
- Understanding of cloud security, software as a service security models, and DevSecOps practices.
- Ability to translate technical security concepts into clear guidance.
- Experience improving security policies, standards, metrics, reporting, or awareness programs.
- Experience collaborating asynchronously through written communication.
- United States citizenship.
Responsibilities
- Lead the customer trust function for contract reviews, security questionnaires, requests for proposals, and customer and vendor security inquiries.
- Set direction, priorities, and operating practices to reduce friction in the sales cycle.
- Partner with Legal, Sales, Product, and Procurement to review and negotiate security-related terms in agreements.
- Manage escalations for complex security questionnaires, risk assessments, and contract issues.
- Develop security templates, playbooks, fallback positions, and training materials.
- Build and maintain security policies and mature security standards.
- Drive security metrics and reporting, including quarterly business reviews.
- Oversee the security awareness program and improve workflows with automation and AI tooling.
Benefits
- Health, financial, and well-being benefits.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Parental leave.
