Staff Product Manager, Software Supply Chain Security

At GitLab, we are at the forefront of innovation as an open-core software company, providing the most comprehensive AI-powered DevSecOps Platform utilized by over 100,000 organizations worldwide. Our mission is to empower everyone to contribute to the software that shapes our world. By fostering a culture of collaboration, we enable consumers to become contributors, accelerating human progress significantly. Our platform unifies teams and organizations, dismantling barriers, and redefining the realms of possibility in software development. Through our products like Duo Enterprise and Duo Agent Platform, our customers harness AI benefits throughout the Software Development Life Cycle (SDLC).Our team embodies the same principles we instill in our products, embracing AI as a vital productivity enhancer. Every team member is expected to integrate AI into their daily workflows to amplify efficiency, spark innovation, and drive meaningful impact. GitLab is where careers thrive, innovation flourishes, and every voice matters. Our high-performance culture, guided by our values and continuous knowledge exchange, empowers our team members to achieve their full potential while collaborating with industry leaders to tackle complex challenges. Join us in shaping the future as we develop technology that transforms global software development.Role OverviewAs part of our growth strategy, GitLab is expanding its Software Supply Chain Security (SSCS) product line to seize a massive market opportunity projected to be valued at $3-8 billion, with an expected enterprise adoption rate of 85% by 2028. Regulatory mandates such as EO 14028 and the EU Cyber Resilience Act, alongside a surge in supply chain attacks like SolarWinds and Shai-Hulud, underline the urgent demand for innovative security solutions.In your role as the Staff Product Manager for Software Supply Chain Security (SSCS), you will spearhead the strategy and delivery of a pioneering product line that secures every aspect surrounding the code, extending beyond the code itself. You will oversee a suite of product pillars within the software supply chain, encompassing provenance, attestation, signing and verification, Software Bill of Materials (SBOM), malicious package detection, and a dependency firewall. Reporting to the Security & Compliance product area, you will collaborate closely with engineering, UX, and cross-functional partners to translate complex frameworks such as SLSA into clear, valuable capabilities that address pressing security needs.

At GitLab, we are on a mission to revolutionize software development through our cutting-edge AI-powered DevSecOps Platform, trusted by over 100,000 organizations worldwide. Our goal is to empower everyone to contribute to and create the software that shapes our future. By fostering a culture where consumers become contributors, we accelerate human progress and innovation. Our platform facilitates seamless collaboration across teams and organizations, breaking down barriers and redefining the possibilities in software development. With products like Duo Enterprise and Duo Agent Platform, we integrate AI across the entire Software Development Life Cycle (SDLC) for maximum efficiency.At GitLab, we embrace AI as a fundamental productivity enhancer. Every team member is encouraged to weave AI into their daily tasks, driving innovation, efficiency, and impact. Join us where your career can soar, innovation is nurtured, and every voice is heard. Our high-performance culture, anchored by our core values, promotes continuous knowledge sharing, allowing our team members to achieve their full potential while working alongside industry leaders to tackle complex challenges. Join us in co-creating the future as we build technology that transforms how the world develops software.Role OverviewAs the Engineering Manager for Software Supply Chain Security: Pipeline Security, you will lead a dedicated team focused on enhancing the security and trustworthiness of GitLab CI pipelines for thousands of organizations. You will oversee the design and delivery of critical Software Supply Chain Security features, concentrating on CI job artifact security. This includes the implementation of the SLSA (Supply-chain Levels for Software Artifacts) framework in GitLab CI/CD and the integration of essential capabilities like SBOM, software composition analysis, and vulnerability management. Your role will involve treating your team as a product, ensuring team well-being, recruiting and nurturing a high-performing group of engineers, and working closely with Product Management and Security to fulfill roadmap commitments. Together, you will enhance users' ability to safeguard their software supply chains.Some examples of our projects:Pipeline Security Enhancements

At GitLab, we are not just an open-core software company; we are pioneers in developing the most advanced AI-powered DevSecOps Platform that serves over 100,000 organizations worldwide. Our mission is to empower individuals to contribute to and co-create the software that drives our modern world. By transforming consumers into contributors, we significantly accelerate human progress. Our platform bridges the gaps between teams and organizations, revolutionizing the possibilities in software development. Our innovative products, including Duo Enterprise and Duo Agent Platform, provide AI advantages at every phase of the Software Development Life Cycle (SDLC).We embrace AI as an essential productivity enhancer, encouraging all team members to integrate AI into their daily tasks to boost efficiency, foster innovation, and make a substantial impact. At GitLab, you will find a culture where careers thrive, innovation is celebrated, and every voice is heard. Our commitment to high performance is aligned with our core values and continuous knowledge sharing, allowing our team to reach their full potential while collaborating with industry experts to tackle complex challenges. Join us in co-creating the future as we develop technology that reshapes how software is created around the globe.Role OverviewAs the Principal Engineer for Software Supply Chain Security, you will be at the forefront of defining and executing the technical strategy that secures the construction and delivery of software on GitLab’s DevSecOps platform. You will provide architectural direction across multiple engineering teams, collaborating closely with infrastructure and CI/CD teams to fortify our pipelines, infrastructure, and access layers. Your contributions will play a critical role in shaping GitLab’s enterprise security framework within the rapidly evolving software supply chain security landscape. You will prioritize SLSA Level 3 compliance, secrets management, CI/CD security enhancements, and the foundational elements of GitLab’s global zero trust architecture. Additionally, you will mentor Staff Engineers and individual contributors, guiding essential technical decisions while acting as a key spokesperson for GitLab’s secure, mission-critical SaaS that supports millions of pipelines.Examples of our ongoing projects include:Achieving SLSA Level 3 compliance and provenance attestation across GitLab's offerings...

About Carfair Composites Carfair Composites specializes in fiber-reinforced plastic design and composite technology. As part of the NFI Group, Carfair supports propulsion-agnostic bus and coach mobility solutions, with manufacturing and distribution centers across North America, including Winnipeg, Manitoba. The company’s products serve a range of industries, including agriculture, automotive, construction, transportation, commercial, food processing, and medical. Role Overview This full-time onsite position is based in Winnipeg, Manitoba. The Director of Supply Chain Management leads all supply chain functions within the Fabrication (Fabco) division and reports to the Lead Director of Business Operations. The scope includes procurement, planning, materials management, and logistics. The director ensures efficient, compliant, and cost-effective movement of materials and finished goods, supporting business growth and service quality while managing risk. Why Carfair Composites? Work on projects advancing the electrification of mass mobility worldwide. Competitive salary and a comprehensive benefits package, effective immediately. Paid holidays and vacation time. Registered pension plan with a strong company match. Contribute to a better product, a better workplace, and a better world. Inclusive workplace culture that values every team member. On-the-job training in a continuous learning environment (Carfair invested $15.9 million in 2024). Opportunities for advancement within the NFI Group family of companies. Recognized as one of Manitoba’s Top 25 employers. Key Responsibilities Develop and execute a supply chain strategy that aligns with company goals and financial targets. Oversee procurement and sourcing, including supplier selection, contract negotiation, and supplier performance management to achieve quality, cost, and service standards. Lead demand and supply planning, along with materials management, to improve service levels and optimize working capital. Maintain inventory accuracy and integrity through effective controls and cycle counting, supporting manufacturing and financial goals. Direct logistics and transportation to ensure timely, compliant, and cost-effective delivery of products. Set and track key performance indicators (KPIs) to drive operational excellence.

Join Groupe Helios as a Supply Chain Agent where you will play a vital role in enhancing our supply chain operations. As part of our dynamic team, you will manage procurement processes, coordinate with suppliers, and ensure timely delivery of goods. This is an exciting opportunity for individuals passionate about logistics and supply chain management.

Telesat is seeking a dynamic and detail-oriented Supply Chain Contract Specialist to join our team in Ottawa. In this role, you will be responsible for managing and optimizing the supply chain contract processes to ensure efficiency and compliance. You will collaborate with various departments to support procurement activities and establish strong relationships with suppliers.

Join Our Dynamic Team:As a key member of our Supply Chain team, you will take on the role of Supply Chain Specialist, responsible for procurement, inventory management, and demand forecasting for a specific product range, while enhancing the customer experience.Your role will involve maintaining production schedules with contracted manufacturers, ensuring that our Enterprise Resource Planning (ERP) software parameters are updated, and participating in the continuous improvement of supply chain processes.Your Daily Responsibilities:Prepare purchase orders to ensure uninterrupted product availability and timely delivery to customers.Manage delivery schedules with suppliers and contracted manufacturers.Cultivate strong supplier relationships.Keep the production schedule for finished products and subassemblies current in close collaboration with the sales team.Evaluate and manage stock levels across various warehouses to maintain supply consistency.Analyze sales forecast reports and stock shortages to guarantee product availability.Communicate delivery dates and shipping information with the sales team, customer service, and suppliers.Assist in mapping and enhancing supply chain processes, including procurement and logistics.Acquire necessary knowledge for entering and maintaining ERP software parameters.Oversee the return process to suppliers.Coordinate and perform administrative tasks related to the above responsibilities (accounts payable, transaction modifications, etc.).Support Accounts Payable and Logistics in reconciling shipping slips and invoices as needed.

Join our dynamic team at Solink as a Logistics and Supply Chain Manager. In this role, you will be instrumental in enhancing our supply chain processes and logistics operations. You will oversee the end-to-end logistics management, ensuring efficient delivery and distribution systems that meet our clients' needs. Your leadership will guide a team dedicated to operational excellence while fostering a culture of continuous improvement.

At abcellera, we believe in the power of medicine to change lives. Our mission is to continually surpass expectations and deliver transformative therapies to patients in need. We are committed to pursuing scientific rigor and embracing the challenges that come with innovation. We are looking for a dedicated Clinical Supply Chain Manager to lead the comprehensive management of Investigational Medicinal Products (IMP) and supporting supplies for our global clinical trials. In this critical role, you will ensure that the right products are available at the right time and in optimal condition for our clinical studies and patients. Your strong collaboration skills will be essential as you work closely with cross-functional teams, including Clinical Operations, CMC, Quality Assurance, and Regulatory Affairs, while also overseeing external partners such as CMOs, depots, and couriers to implement effective clinical supply strategies. Key Responsibilities: Develop and maintain global supply plans for clinical trials, including demand forecasting across AbCellera’s projects. Oversee and maintain global inventory across all central depots and clinical sites to ensure a seamless supply chain, utilizing ERP/inventory systems for precise record-keeping. Manage packaging, labeling, and distribution activities in collaboration with CMO partners. Coordinate global shipments of clinical supplies in strict compliance with international trade regulations, import/export requirements, and customs documentation. Supervise and qualify temperature-controlled shipments (cold chain), partnering with Quality Assurance to address any temperature excursions. Work with teams and vendors to establish and lead User Acceptance Testing (UAT) for Interactive Response Technology (IRT/IXRS) systems that manage inventory, randomization, and drug assignment. Ensure all clinical supply activities comply with Good Manufacturing Practices (GMP), Good Clinical Practices (GCP), and applicable global regulations. Act as the Clinical Supply Subject Matter Expert on clinical study teams, collaborating with CMC and Regulatory Affairs on label approvals and submission requirements. Oversee drug accountability, returns, and destruction processes, ensuring thorough documentation and assisting in the development and management of the clinical supply budget for assigned studies.

Discover OktaAt Okta, we are revolutionizing identity management. Our mission is to enable individuals to securely utilize any technology, anytime, on any device or application. Through our versatile Okta Platform and Auth0 Platform, we deliver secure access, authentication, and automation, placing identity at the forefront of business security and growth.We value diverse perspectives and experiences at Okta. We're not just seeking candidates who meet every requirement; instead, we are looking for lifelong learners who can enrich our team with their unique insights.Join us in creating a world where identity is in your hands.The TeamOur Workforce Identity Cloud Security Engineering group is at the cutting edge of innovation, turning visionary ideas into top-notch security software solutions that support large-scale, mission-critical applications. Our security engineering team possesses a unique skill set that merges security expertise with the ability to design, implement, and deploy security features seamlessly, enhancing product functionality without hindrance. We are committed to elevating customer safety and privacy through robust security services integrated with the Okta core product.The RoleWe are in search of a seasoned and enthusiastic Staff Software Security Engineer to join our Workforce Identity Cloud Security Engineering group. This role focuses on architecting and developing security solutions that strengthen our frameworks and infrastructure. You will be encouraged to implement defense-in-depth strategies, adhere to industry security standards, and uphold the principle of least privilege, thereby enhancing our security posture.This high-impact position is set within a security-focused, dynamic organization that is on the brink of significant growth and achievement. You will serve as a key liaison between the Security and Engineering teams, forging technical synergies and shaping the security roadmap. Your efforts will concentrate on enhancing security and privacy aspects across our services, executing on a weekly release schedule. You will have the autonomy to propose exciting new projects for our roadmap and engage in initiatives utilizing cutting-edge technologies. Join us and contribute to transforming the cloud computing landscape.What You Will DoCollaborate with engineering and security teams to define innovative security roadmap requirements.Advocate security best practices and promote secure coding methodologies.

What’s the Role?Join us as a Supply Chain Specialist where your passion for optimizing processes and making informed, data-driven decisions will shine. In this dynamic position, you will facilitate tactical procurement across diverse categories, foster robust supplier relationships, and ensure that our organization has access to the right products and services at the right time and value.What You’ll Be DoingSupporting the development of category strategy roadmaps and executing sourcing plans.Assisting in the creation and finalization of Master Service Agreements (MSAs), including pricing and commercial terms.Managing fixed-asset procurement and leasing requirements, along with tactical sourcing across multiple categories.Enhancing procurement and supply chain processes for continuous improvement.Identifying and assessing suppliers through Requests for Proposals (RFPs) and input from stakeholders.Spotting opportunities for supplier, SKU, or specification rationalization.Identifying cost savings and value-add opportunities within designated categories.Collaborating closely with suppliers and internal stakeholders to cultivate strong relationships.Working with teams across Canada and the U.S. to identify efficiencies and shared opportunities.Communicating procurement updates and category initiatives throughout the organization.Facilitating the smooth implementation of new category strategies and process changes.

Join Tenstorrent as the Director of Quality in Supply Chain Management, where you will lead and shape our quality assurance strategies across the supply chain. Your expertise will ensure that our products meet the highest standards of quality, compliance, and customer satisfaction. You will be responsible for developing and implementing quality control processes, working closely with cross-functional teams to enhance efficiency and effectiveness.As part of our leadership team, you will have the opportunity to influence and drive quality initiatives, establish metrics for performance assessment, and foster a culture of continuous improvement within the organization.

About the Role Videotron is looking for a Supply Chain Intern to join the team in Montréal. This internship provides hands-on experience in the telecommunications sector, working closely with the procurement group. What You Will Do Assist with inventory management tasks Communicate with suppliers on routine matters Support data analysis projects for the procurement team What You’ll Gain Exposure to supply chain operations in a leading telecom company Opportunities to build practical skills in procurement and logistics Experience contributing to Videotron’s customer service mission

We are seeking a dedicated and dynamic Manager for our Operating Room Supply Chain and Inventory team at University Health Network. This pivotal role involves overseeing the management of supply chain operations related to surgical programs, ensuring optimal inventory levels, and streamlining processes to enhance efficiency and patient care. The successful candidate will be tasked with implementing best practices in inventory management, collaborating with surgical teams, and maintaining compliance with health regulations.

This project-based contract role with Mindrift offers experienced supply chain and procurement professionals the chance to contribute to AI development for technology companies. The work is fully remote, open to candidates based in Manitoba, Canada. Role overview As a Freelance Supply Chain Consultant - AI Trainer, apply real-world procurement and supply chain knowledge to test, evaluate, and improve AI systems. The role involves creating disruption scenarios, defining expected outcomes, and recommending mitigation strategies. Your expertise will help assess the accuracy and relevance of AI-generated outputs in business contexts. What you will do Develop realistic supply chain disruption scenarios, such as supplier delays, logistics issues, or quality failures, drawing on manufacturing and procurement experience. Define expected results and propose mitigation strategies for each scenario. Review and evaluate AI-generated responses, ensuring alignment with established business logic. Assess outputs for accuracy and completeness within ERP environments, focusing on platforms like Microsoft Dynamics 365, Coupa, Jaggaer, and Ariba (SAP). Support structured data creation and validation by following set guidelines and frameworks. Requirements Minimum 4 years of hands-on experience in procurement, supply chain, or purchasing, ideally within manufacturing. Strong understanding of procurement workflows, including purchase orders, vendor management, inventory, and production planning. Direct experience with ERP systems such as SAP, Oracle, or Microsoft Dynamics 365. Ability to design and analyze supply chain disruption scenarios and mitigation plans. Knowledge of disruption types: delays, shortages, quality issues, and logistics challenges. Familiarity with Incoterms and logistics or transportation management. Understanding of Bill of Materials (BOM) and production planning processes. Experience with supplier performance metrics (for example, OTIF, lead times, quality scores). Strong analytical skills for evaluating AI outputs against business logic. Background in data validation, structured data entry, or annotation tasks. Excellent written English communication skills. Project process Apply, complete the qualification steps, join a project, and carry out assigned tasks. Compensation is provided for completed work. Time commitment Active project phases usually require 10–20 hours per week. Workload may vary and is not guaranteed outside of these phases. Compensation Earnings can reach up to $60 per hour, depending on experience and contribution level.

The Supply Chain Rotational Program Associate position at Arc'teryx Equipment Inc. is designed for recent graduates interested in starting a career in supply chain management. This full-time, permanent role is based at the North Vancouver Head Office and the Manufacturing facility in New Westminster. Candidates must have eligibility to work in Canada. Program Structure Associates participate in a rotational program that spans several teams within the Supply Chain organization. Each rotation is tailored to the individual's background and interests, providing hands-on experience and exposure to a range of supply chain functions. Key Responsibilities Collaborate with multiple supply chain teams to understand end-to-end processes Engage with senior leaders and mentors for guidance and support Share insights and learnings with the Supply Chain leadership team through presentations Reflect on career goals and lay the groundwork for future professional growth Team Environment The Arc'teryx Supply Chain team transforms product concepts into reality and manages delivery to guests, wholesale partners, and retail stores. The team works across eight specialized groups and partners with various external organizations to maintain an efficient flow of products.

Join our dynamic team at American Iron and Metal as a Supply Chain Specialist! In this vital role, you will contribute to optimizing our supply chain operations, ensuring efficiency and effectiveness in procurement processes. You will work closely with various departments to facilitate seamless operations and drive cost efficiency.

Join Tiger Analytics as a Manager/Sr. Manager in Supply Chain Analytics, where you will play a pivotal role in driving data-driven decision-making within the Consumer Packaged Goods (CPG) and Retail sectors. You will lead a talented team in analyzing supply chain data, optimizing processes, and delivering actionable insights that enhance operational efficiency and boost profitability.In this remote position, you will leverage your expertise in analytics, data visualization, and supply chain strategies to influence key stakeholders and guide strategic initiatives. Your analytical prowess and leadership skills will be essential in shaping the future of our clients’ supply chain operations.

Eli Health develops technology for continuous hormone tracking, making health insights available instantly through its Hormometer™ device. After years of research and several patent-pending advances, the company’s platform transforms hormone data into practical information, aiming to make health tracking as routine as using a thermometer or glucometer. The Supply Chain and Fulfillment Lead is based onsite in Montreal. This role manages the entire supply chain, procurement, logistics, and fulfillment operations for Eli Health. As the company expands, the position takes on a central role in supporting cross-border shipping between Canada and the US, overseeing supplier networks, and handling rising order volumes while maintaining cost efficiency in fulfillment. Key Responsibilities Supply Chain and Procurement Develop and maintain a robust supply chain with backup suppliers for all critical components to minimize single-source risks. Negotiate with vendors to reduce cost of goods sold, seek alternative sourcing, and refine procurement processes. Lead the selection, qualification, and auditing of vendors, building long-term supplier partnerships. Assess supplier risks and establish contingency plans for potential disruptions. Logistics and Fulfillment Address delays and customs issues for shipments to the US. Design and manage order workflows from purchase through delivery. Supervise third-party logistics providers and carriers, monitoring their performance against set metrics. Work to lower per-order fulfillment costs, currently above $10, as order volumes grow. Inventory and Systems Implement scalable systems for tracking inventory and planning procurement. Prepare operational reports to provide leadership with real-time visibility into inventory and fulfillment operations.

The Opportunity:We are on the lookout for an innovative, strategic, and results-oriented Executive Supply Chain Leader to join our rapidly expanding HVAC and electrical contracting firm, which operates throughout the US and Canada. In this pivotal role, you will direct our Supply Chain team in the development and implementation of the company’s supply planning function. You will be responsible for overseeing all facets of supply planning, including ERP configuration, supply strategies, and MRP execution, ensuring a robust and reliable supply chain.What You Will Do:Lead our Supply Chain team to achieve operational excellence.Define minimum/maximum, reorder points, and forecast-based strategies for item classifications.Balance lead times, consumption variability, and inventory targets effectively.Work closely with project and operations teams to establish part demand forecasts.Ensure alignment between field requirements and available supply.