# Principal Security Awareness & Human Risk Engineer

**Company**: GitLab
**Location**: Remote, Canada; Remote, United Kingdom; Remote, United States
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $203,200-$275,000 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/gitlab/jobs/8770689002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_1f393d4c-b42

## Description

GitLab is looking for a Principal Security Awareness & Human Risk Engineer to own and evolve its global security awareness and education program, driving measurable reduction in human-related security risk.

The ideal candidate will have a minimum of 10 years' experience building or scaling global awareness and human-risk programs in a large, globally distributed enterprise, with measurable outcomes.

Responsibilities:

- Own and evolve the global security awareness and education program

- Lead the phishing simulation program end to end

- Apply behavior change principles to reinforce secure habits

- Build and sustain security culture through learning campaigns

- Produce multimedia awareness and education content

- Administer training and phishing platforms

- Define and report performance indicators

- Own vendor relationships for phishing and secure coding training

- Lead market and competitor evaluations

- Collaborate on security policies, standards, and procedures

Requirements:

- 10+ years of experience in global awareness and human-risk programs

- SANS Security Awareness Professional (SSAP) certification or equivalent

- Experience running enterprise-scale phishing programs

- Track record of evaluating and selecting security training vendors

- Instructional design capability

- Working knowledge of security policy development and audit support

Benefits:

- Benefits to support health, finances, and well-being

- Flexible Paid Time Off

- Team Member Resource Groups

- Equity Compensation & Employee Stock Purchase Plan

- Growth and Development Fund

- Parental Leave

## Skills

### Required
- security awareness
- human risk management
- phishing simulation
- behavior change principles
- instructional design
- security policy development

### Nice to have
- SANS Security Awareness Professional (SSAP)
- OWASP
- video production

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/gitlab/jobs/8770689002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)