Senior Audit and SDLC expert with security and governance experience to deploy SDLC using Jira and Gitlab for our large fleet management client

Duration: 6 months to start, possibility of extension/conversion to FTE

Location: Hybrid (2 days/Oakville)

Responsibilities:

• Develop and Implement SDLC Governance Framework: Define and document a comprehensive SDLC governance model aligned with industry best practices and tailored to our organization's specific business unit needs and objectives, including integration with Jira, GitLab Ultimate and GitLab Duo. Must develop a deep understanding of our current mode of operation and map out specific items required to get to a standard future mode of operation by business unit.

• Drive DevSecOps Adoption: Champion the adoption of a DevSecOps operating model by integrating security practices throughout the SDLC, ensuring compliance with ISO 27001, Nist 800-171, SOC2, FedRAMP and NSS standards as appropriate

• Establish KPIs and Reporting: Define key performance indicators (KPIs) to measure the effectiveness of the SDLC including integration into key business processes like Cloud Business Office (CBO), Change Enablement (future state) and Jira ticket management

• Collaborate with Cross-Functional Teams: Work closely with stakeholders across different departments, including Product Management, Software Development, Embedded Engineering, Data and Analytics, Security and agile practice to ensure alignment and effective implementation of the SDLC governance model.

• RBAC optimization: analyze and recommend security RBAC structure and implementation plan

• Optimize Development Processes: Analyze existing development processes and identify opportunities for optimization to improve code velocity, quality, security and overall developer productivity.

• Facilitate AI Adoption: Drive rapid adoption of GitLab Duo AI functionality into the day to day developer life to enhance developer productivity and speed as well as accuracy

• Documentation and Training: Create comprehensive documentation for the SDLC governance model and provide training to development teams and stakeholders.

Must Haves:

• Experience planning, building and running SDLC frameworks within the marketplace for medium to large software development and engineering organizations
• Extensive experience with Jira and GitLab and how to use it to deploy an effective SDLC
• Agile development\Scaled Agile knowledge