GitLab
Senior Security Risk Engineer
$139K–$189K
Remote, Canada +1 · Remote · Senior · Full-time · Posted Sep 29, 2026
- Location
- Remote, Canada
Remote, United States - Experience
- 5+ years in security risk management.
About the job
Owns security and third-party risk management, translating technical findings into business risks, driving remediation, and modernizing risk workflows with automation and AI.
What you'll do
- Identify, quantify, prioritize, and track security and third-party risks; maintain the risk register and quarterly leadership reporting.
- Drive remediation of security findings and risk exceptions across teams, escalating stalled or high-severity issues.
- Mature AI risk management and build automation, scripting, or AI-enabled tooling for risk and GRC workflows.
What they ask for
- 5+ years of experience in security risk management using security-centric risk or compliance frameworks.
- Experience with qualitative and quantitative risk analysis, translating technical risks into measurable business impact.
- Track record driving risk assessments, risk registers, and remediation to closure across multiple functions.
- Demonstrated ability to build scripts, workflows, or AI-enabled tooling that reduces manual risk or GRC work.
Nice to have
- Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF.
- Relevant certifications such as CISSP, CISM, CISA, or CRISC.
Pay
$139,200 — $189,000 USD (base salary)
Tools
NIST RMF, NIST 800-39, ISO 31000, ISO 42001, NIST AI RMF
AI focus
Own AI risk management, including AI impact and risk assessments and risk treatments supporting ISO 42001 certification; build AI-enabled tooling and automate risk and GRC workflows. GitLab expects team members to incorporate AI into daily workflows.
Model-written summary · the original posting is authoritative