Manager, Sox Pmo, Business Process

GitLab GitLab · Enterprise · NA · Corporate Controller

This role is for a Manager, SOX PMO, Business Process at GitLab, focusing on strengthening the Sarbanes-Oxley (SOX) compliance program. The individual will lead assigned process areas, guide control frameworks, and partner with the IT SOX PMO to ensure compliance readiness. Key responsibilities include coordinating walkthroughs, maintaining control documentation, supporting risk assessment and remediation, and identifying automation opportunities within the SOX environment. The role requires experience in auditing, risk assessment, and internal controls within a SOX or similar compliance setting, with knowledge of SOX requirements and COSO frameworks.

What you'd actually do

  1. Serve as the primary subject matter expert for assigned SOX business processes and provide guidance to support compliance with SOX requirements.
  2. Partner with the IT SOX PMO to assess new systems, applications, and related controls for compliance readiness.
  3. Assist with the annual SOX risk assessment by helping evaluate process risks and control coverage.
  4. Monitor emerging risks and update controls, documentation, and process expectations as business needs change.
  5. Coordinate and lead SOX business walkthroughs with control owners and cross-functional stakeholders.

Skills

Required

  • Experience with auditing, risk assessment, internal controls, and root cause analysis in a SOX or similar compliance environment.
  • Knowledge of SOX compliance requirements and internal control frameworks such as the Committee of Sponsoring Organizations of the Treadway Commission (COSO).
  • Ability to evaluate business processes, identify control gaps, and support practical remediation planning.
  • Skill in creating and maintaining clear process documentation, including narratives, flowcharts, and risk and control matrices.
  • Strength in written and verbal communication, including the ability to explain requirements, provide training, and influence stakeholders across functions.
  • Judgment to navigate complex issues using critical thinking, sound recommendations, and a balanced approach to risk.

Nice to have

  • Familiarity with software or technology company environments and with tools such as AuditBoard is useful.
  • Openness to candidates with transferable experience from audit, accounting, finance, compliance, or related fields, along with relevant education in Accounting, Finance, or a similar area; professional certifications such as Certified Public Accountant (CPA) or Certified Internal Auditor (CIA) are a plus.

What the JD emphasized

  • SOX compliance program
  • SOX requirements
  • SOX PMO
  • SOX risk assessment
  • SOX audit process
  • SOX environment
  • SOX compliance requirements
  • SOX testing