Manager, SOX PMO, Business Process

<div class="content-intro"><p>GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.</p> <p>The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values&nbsp;and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. <a href="https://www.youtube.com/watch?v=OuZIb5zszQI">Co-create the future with us</a> as we build technology that transforms how the world develops software.</p> <p>*<em>Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.</em></p></div><h4><strong>An overview of this role</strong></h4> <p>As GitLab continues to scale, the <strong>Manager, SOX PMO, Business Process</strong> will help strengthen our Sarbanes-Oxley (SOX) compliance program across key business processes. In this role, you'll lead assigned process areas, guide the design and maintenance of effective control frameworks, and partner closely with the IT SOX PMO to support compliance readiness as new systems and applications are introduced. Reporting to the <strong>Director, SOX PMO Leader</strong> within the <strong>CAO organization</strong>, you'll play an important part in helping GitLab build a scalable, practical SOX environment that supports growth while improving consistency, readiness, and efficiency.</p> <p>This is a strong fit if you're motivated by work that combines program leadership, cross-functional partnership, and hands-on execution. In your first year, you'll help coordinate walkthroughs, maintain business control documentation, support risk assessment and remediation efforts, and identify opportunities to automate SOX activities to reduce manual work and improve control reliability.</p> <p><strong>What You’ll Do</strong> &nbsp;</p> <ul> <li value="1"><strong>Serve</strong> as the primary subject matter expert for assigned SOX business processes and provide guidance to support compliance with SOX requirements.</li> <li value="2"><strong>Partner</strong> with the IT SOX PMO to assess new systems, applications, and related controls for compliance readiness.</li> <li value="3"><strong>Assist</strong> with the annual SOX risk assessment by helping evaluate process risks and control coverage.</li> <li value="4"><strong>Monitor</strong> emerging risks and update controls, documentation, and process expectations as business needs change.</li> <li value="5"><strong>Coordinate</strong> and lead SOX business walkthroughs with control owners and cross-functional stakeholders.</li> <li value="6"><strong>Develop</strong> and maintain control documentation, including process narratives, flowcharts, and risk and control matrices.</li> <li value="7"><strong>Assess</strong> control deficiencies and work with management to develop, implement, and track remediation plans.</li> <li value="8"><strong>Collaborate</strong> with leaders across Finance, Operations, Legal, HR, Sales, Engineering, and IT, as well as internal and external auditors, to support an effective SOX audit process and identify automation opportunities within the SOX environment.</li> </ul> <p><strong>What You’ll Bring</strong></p> <ul> <li value="1"><strong>Experience</strong> with auditing, risk assessment, internal controls, and root cause analysis in a SOX or similar compliance environment.</li> <li value="2"><strong>Knowledge</strong> of SOX compliance requirements and internal control frameworks such as the Committee of Sponsoring Organizations of the Treadway Commission (COSO).</li> <li value="3"><strong>Ability</strong> to evaluate business processes, identify control gaps, and support practical remediation planning.</li> <li value="4"><strong>Skill</strong> in creating and maintaining clear process documentation, including narratives, flowcharts, and risk and control matrices.</li> <li value="5"><strong>Strength</strong> in written and verbal communication, including the ability to explain requirements, provide training, and influence stakeholders across functions.</li> <li value="6"><strong>Judgment</strong> to navigate complex issues using critical thinking, sound recommendations, and a balanced approach to risk.</li> <li value="7"><strong>Familiarity</strong> with software or technology company environments and with tools such as AuditBoard is useful.</li> <li value="8"><strong>Openness</strong> to candidates with transferable experience from audit, accounting, finance, compliance, or related fields, along with relevant education in Accounting, Finance, or a similar area; professional certifications such as Certified Public Accountant (CPA) or Certified Internal Auditor (CIA) are a plus.</li> </ul> <p><strong>About the team</strong></p> <p>The SOX PMO team is a second-line function within GitLab's CAO organization that owns and manages the enterprise SOX compliance program across risk assessment, control design, documentation, and coordination with external auditors, while Internal Audit operates as the independent third-line function for SOX testing. The team works as both a subject matter expert group and a business partner to first-line control owners across the company, helping build control frameworks that are practical, scalable, and aligned with a fast-growing business. As an all-remote team, we collaborate asynchronously across regions and functions, with a strong focus on balancing strategic program leadership with hands-on execution as GitLab continues to evolve.</p> <h4><strong>How GitLab will support you</strong></h4> <ul> <li><a href="https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/" target="_blank">Benefits to support your health, finances, and well-being</a></li> <li><a href="https://handbook.gitlab.com/handbook/people-group/paid-time-off/" target="_blank">Flexible Paid Time Off</a>&nbsp;</li> <li><a href="https://about.gitlab.com/company/culture/inclusion/erg-guide/#:~:text=Definition%20of%20the%20TMRG%20%2D%20Team%20Member%20Resource%20Groups,-TMRGs%20are%20voluntary&amp;text=The%20purpose%20for%20this%20type,developing%20the%20sense%20of%20belonging." targe