VP Corporate Security

### Role Overview Corporate Security at GitLab leads Identity Engineering, Corporate Security Engineering, and End User Services, bringing together the engineering and service functions that secure workforce identity, internal systems, endpoints, and core business applications. This organization enables GitLab team members to work productively and securely through a 24x5 support model and engineering ownership across identity, device trust, SaaS, platform, and internal security controls. ### Key Responsibilities - Set the vision and operating model for Corporate Security across engineering, identity, endpoint/device security, and end-user services, aligning security outcomes with productivity. - Lead a globally distributed, multi-disciplinary organization through clear roadmaps, strong managers, and measurable priorities. - Own internal identity and access strategy, including Okta, lifecycle automation, RBAC/ABAC, and Identity v3. - Drive secure-by-default endpoint and device strategy, specifically for macOS, configuration management, and telemetry. - Oversee end-user services and internal IT support, including hardware support and core applications like Google Workspace, Slack, and Zoom. - Build scalable onboarding, offboarding, and role-change processes to reduce risk and improve auditability. - Partner cross-functionally with Security, IT, Engineering, People, Compliance, Finance, and Legal to translate requirements into pragmatic controls. - Manage vendor, tooling, and budget strategy for the Corporate Security estate. ### Required Qualifications - Significant senior leadership experience in corporate security, enterprise IT, IAM, or endpoint security at scale. - Strong command of workforce identity concepts: SSO, SAML, OAuth, lifecycle automation, RBAC/ABAC, and privileged identity governance. - Deep understanding of modern endpoint security in a macOS-heavy environment (MDM, hardening, software distribution). - Proven track record of replacing manual processes with automation, GitOps, infrastructure-as-code, and auditable engineering workflows. - Experience balancing service operations with engineering investment. - Ability to operate in regulated, audit-heavy environments. - Excellent communication skills and leadership experience in an all-remote, asynchronous organization.