[Hiring] Manager, SOX PMO - Business Process @GitLab

Role Description

As Manager, SOX PMO - Business Process, you'll lead Sarbanes-Oxley (SOX) compliance for assigned business processes as part of GitLab's second line. This is advisory work, not repeatable testing:

• Deeply understand how processes work, evaluate risks as the business changes, and help control owners design and remediate controls that hold up to audit.
• Form well-supported conclusions, align with control owners and Internal Audit, and defend positions to external auditors.
• Help teams adopt AI agents into our SOX processes with confidence.
• Partner with the IT SOX PMO on readiness for new systems and applications.

What You’ll Do

• Lead SOX compliance for assigned business processes as the second-line subject matter expert.
• Monitor risks from new and changing processes, products, and systems.
• Evaluate control deficiencies and prepare well-supported severity assessments.
• Prepare auditor-ready technical memos and reports on SOX compliance status for leadership.
• Lead business walkthroughs and stakeholder meetings, coordinating with Internal Audit and external auditors.
• Advise on controls for AI-enabled processes and find opportunities to automate SOX work using AI tools.
• Develop and maintain accurate process narratives, flowcharts, and risk and control matrices.

Qualifications

• Hands-on SOX and internal controls experience in control design, remediation, and deficiency evaluation.
• Experience in the software or technology industry; SOX PMO, Big Four risk advisory, or assurance experience is a strong plus.
• A bachelor's degree in Accounting, Finance, or a related field; an active CPA credential (strongly preferred) or CIA credential.
• A strong understanding of SOX requirements and internal control frameworks, such as the COSO framework.
• Professional judgment and skepticism in verifying facts and recognizing missing information.
• A track record of independently solving ambiguous, novel problems.
• Clear written and verbal communication skills, including auditor-ready memos.
• A practical, innovative approach to helping the business adopt new technologies while maintaining compliance.
• Experience with usage-based billing or AuditBoard is a plus.

Benefits

• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental leave
• Home office support