Principal Security Awareness & Human Risk Engineer

GitLab is looking for a Principal Security Awareness & Human Risk Engineer to own and evolve its global security awareness and education program, driving measurable reduction in human-related security risk.

The ideal candidate will have a minimum of 10 years' experience building or scaling global awareness and human-risk programs in a large, globally distributed enterprise, with measurable outcomes.

Responsibilities:

• Own and evolve the global security awareness and education program
• Lead the phishing simulation program end to end
• Apply behavior change principles to reinforce secure habits
• Build and sustain security culture through learning campaigns
• Produce multimedia awareness and education content
• Administer training and phishing platforms
• Define and report performance indicators
• Own vendor relationships for phishing and secure coding training
• Lead market and competitor evaluations
• Collaborate on security policies, standards, and procedures

Requirements:

• 10+ years of experience in global awareness and human-risk programs
• SANS Security Awareness Professional (SSAP) certification or equivalent
• Experience running enterprise-scale phishing programs
• Track record of evaluating and selecting security training vendors
• Instructional design capability
• Working knowledge of security policy development and audit support

Benefits:

• Benefits to support health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave