About the role
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Senior Director, Internal Audit you'll report to the Vice President, Internal Audit, and help strengthen GitLab's Internal Audit function. You'll turn an established audit methodology into consistent, practical ways of working, guide audit quality and execution, and help prepare and implement a risk-based audit plan that addresses GitLab's strategic, business, and compliance objectives. You'll also support the Internal Audit strategy and roadmap, lead the facilitation of our enterprise risk management program, and build trusted relationships with business partners across GitLab. What you’ll do Evolve and operationalize GitLab's Internal Audit methodology, including responsible use of artificial intelligence, stakeholder communications, and consistent templates. Plan and lead risk-based operational audits that deliver practical recommendations for strategic, business, compliance, and emerging risks. Lead, coach, and resource a distributed team to deliver audits and related projects against clear milestones, weekly priorities, and defined outcomes. Facilitate enterprise risk management activities, including emerging-risk discussions, key risk indicator mapping, risk assessments, and risk acceptance oversight, to bring risk awareness into strategic decision making of the company. Partner with business leaders and the Vice President, Internal Audit, to prioritize audit work, share risk insights, and support effective risk mitigation. Oversee the Sarbanes-Oxley testing program and partner closely with the SOX PMO, other second line teams, and our external auditors to support ongoing SOX compliance. Implement and maintain a Quality Assurance and Improvement Program, tracking audit-plan completion, issue-remediation timeliness, and audit-quality results aligned to Institute of Internal Auditors standards. Lead reporting for the Audit Committee and senior management, and deliver special projects and other critical Internal Audit initiatives. What you’ll bring Experience leading internal audit work and managing a significant portfolio of audit activities. Expertise in audit and enterprise risk management, including risk assessment, prioritization, internal controls, root cause analysis, and audit planning. Experience building, coaching, and leading distributed teams through clear priorities, milestones, and outcomes. Ability to assess audit scope and quality through a risk-based, business-focused lens and develop practical recommendations. Experience advising senior stakeholders and functional leaders on risk and mitigation, with clear written and verbal communication skills. Strong resource planning, prioritization, professional judgment, and problem-solving skills across multiple audits and projects. Experience using data, analytical tools, and GitLab throughout the audit lifecycle to solve business problems. A practical approach to improving established processes, including thoughtful use of artificial intelligence; Relevant education, credentials, or equivalent experience in accounting, finance, audit, or risk management are valued, as are Certified Internal Auditor, Certified Information Systems Auditor, Chartered Accountant, Certified Public Accountant, and Master of Business Administration credentials, and software industry experience.
