Manager, SOX PMO, Business Process

An overview of this role

As GitLab continues to scale, the Manager, SOX PMO, Business Process will help strengthen our Sarbanes-Oxley (SOX) compliance program across key business processes. In this role, you'll lead assigned process areas, guide the design and maintenance of effective control frameworks, and partner closely with the IT SOX PMO to support compliance readiness as new systems and applications are introduced. Reporting to the Director, SOX PMO Leader within the CAO organization, you'll play an important part in helping GitLab build a scalable, practical SOX environment that supports growth while improving consistency, readiness, and efficiency.

This is a strong fit if you're motivated by work that combines program leadership, cross-functional partnership, and hands-on execution. In your first year, you'll help coordinate walkthroughs, maintain business control documentation, support risk assessment and remediation efforts, and identify opportunities to automate SOX activities to reduce manual work and improve control reliability.

What You’ll Do  

• Serve as the primary subject matter expert for assigned SOX business processes and provide guidance to support compliance with SOX requirements.
• Partner with the IT SOX PMO to assess new systems, applications, and related controls for compliance readiness.
• Assist with the annual SOX risk assessment by helping evaluate process risks and control coverage.
• Monitor emerging risks and update controls, documentation, and process expectations as business needs change.
• Coordinate and lead SOX business walkthroughs with control owners and cross-functional stakeholders.
• Develop and maintain control documentation, including process narratives, flowcharts, and risk and control matrices.
• Assess control deficiencies and work with management to develop, implement, and track remediation plans.
• Collaborate with leaders across Finance, Operations, Legal, HR, Sales, Engineering, and IT, as well as internal and external auditors, to support an effective SOX audit process and identify automation opportunities within the SOX environment.

What You’ll Bring

• Experience with auditing, risk assessment, internal controls, and root cause analysis in a SOX or similar compliance environment.
• Knowledge of SOX compliance requirements and internal control frameworks su