SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
GitLab is seeking a Manager, IT SOX PMO to own information technology-specific Sarbanes-Oxley (SOX) compliance activities and serve as a subject matter expert for IT general controls (ITGCs) and IT application controls (ITACs). Reporting to the Senior Director, SOX PMO Leader within the Chief Accounting Officer's organization, you will directly support the Senior Manager, IT SOX PMO in strengthening GitLab's IT SOX program, preparing new and changing processes and systems for SOX requirements, and advancing automation in a high-growth technology environment.
Key responsibilities include serving as an IT SOX subject matter expert providing guidance on compliance with SOX requirements; partnering with the business SOX Program Management Office to assess SOX readiness for new or changing systems and business processes; maintaining and improving control documentation including flowcharts, risk and control matrices, and control inventories; facilitating IT control walkthroughs and coordinating remediation of control deficiencies; coordinating with internal and external auditors throughout the SOX audit cycle; reviewing System and Organization Controls (SOC) reports and overseeing the key report testing program; building cross-functional relationships including close partnership with Internal Audit; and identifying opportunities for control automation while monitoring emerging risks and regulatory changes, including those related to artificial intelligence.
You will bring a bachelor's degree in information technology, computer science, accounting, or related field; IT audit and SOX compliance experience with deep knowledge of ITGCs, ITACs, and control frameworks such as COBIT and COSO; a current CISA, CPA, CIA, or CISSP certification; experience in the SaaS industry; proficiency with governance, risk, and compliance tools (AuditBoard experience is a plus); strong professional judgment, critical thinking, and communication skills including persuasion and conflict resolution; a practical and creative approach to complex problems; and familiarity using AI tools to improve compliance processes. The role is fully remote and requires ability to collaborate effectively across US Pacific and Eastern time zones.
