Principal Security GRC Manager, Legal Assurance (USA)

The role

You will address complex customer security challenges at the intersection of technical architecture and business requirements. You will perform contract reviews, provide technical guidance to customers, and create security content to enable sales and field organizations.

What you will do

• Perform comprehensive contract reviews for customer agreements and vendor relationships
• Analyze security and compliance clauses in legal documents
• Provide risk-based recommendations and remediation guidance for contractual security requirements
• Partner with Legal, Sales, Product, and Procurement teams to negotiate security-related contract terms
• Document and track contract-related security obligations
• Join customer and prospect meetings to provide guidance on security practices and controls
• Build and maintain templates, playbooks, fallback positions, and training
• Facilitate customer assurance activities through the Customer Assurance Activities Service Desk
• Provide escalation support for complex security questionnaires, RFPs, and risk assessments
• Act as a technical thought leader by developing security content like blog posts and whitepapers

Required qualifications

• Expertise in law and regulation such as GDPR, CCPA, DORA, EU AI Act
• At least 5 years in customer-facing security roles
• Deep experience in security frameworks and standards such as SOC 2, ISO 27001/27017/27018/42001, FedRAMP, NIST CSF
• Proven track record of contract negotiation and security/privacy agreement reviews
• Exceptional written and verbal communication skills
• Experience creating security content (blogs, whitepapers, presentations)
• Strong understanding of cloud security, SaaS security models, and DevSecOps practices
• Experience working cross-functionally with Sales, Legal, Product, and Engineering teams
• Ability to balance security risk with business objectives

Nice to have

• Experience speaking at conferences
• One or more relevant certifications such as CISSP, CISA, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, or CIPP/CIPM

Benefits

• Benefits to support health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave

Before you apply

• You must be a United States Citizen

About the company

GitLab is the intelligent orchestration platform for DevSecOps. The company enables organizations to increase developer productivity, improve operational efficiency, and reduce security and compliance risk.