About the role
Company Introduction
We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we are collectively disrupting the multi-billion-dollar commerce industry from the ground up and establishing an unparalleled reputation for being leading and reliable force in South Korean commerce.
We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.
Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.
Role Overview
The Security GRC Specialist will support the execution and operationalization of Coupang’s cybersecurity governance, risk management, and compliance programs. Working closely with AI GRC, Control Assurance, Security Architecture, Engineering, Legal, and Privacy, you will maintain continuous risk visibility, support regulatory compliance, and execute technical risk and governance workflows across the enterprise.
What You Will Do
- Compliance & Audit ReadinessSupport compliance operations for domestic and international frameworks (Network Act, PIPA, ISO/IEC 27001, NIST CSF).Serve as a key point of contact for internal and external audits by collecting evidence, coordinating stakeholder interviews, and validating compliance artifacts.Monitor evolving regulatory and industry requirements, proactively identifying control gaps and driving alignment.
- Risk Management & Governance OperationsConduct technical risk assessments for internal infrastructure, production services, third-party vendors, and new technology initiatives.Maintain and enhance the enterprise Security Risk Register, actively tracking open findings, risk acceptance, and remediation timelines.Partner with Security Engineering, IT, and platform teams to drive remediation of audit findings and control deficiencies.Assist in updating cybersecurity policies, maintaining central governance repositories, and generating executive-level GRC metrics and dashboards.
Basic Qualifications
- 6+ years of hands-on experience in Cybersecurity GRC, Information Security, IT Risk Management, or IT Audit.
- Direct experience executing Korean regulatory and certification compliance operations alongside global standards.
- Proven track record of conducting technical risk assessments, managing enterprise risk registers, and driving remediation workflows across cross-functional teams.
- Strong organizational, analytical, and evidence-management skills with high attention to detail.
- Bachelor’s degree in Computer Science, Information Security, Information Systems, or equivalent practical experience.
Preferred Qualifications
- Native or bilingual proficiency in Korean with professional working proficiency in English.
- Experience in high-scale cloud environments or fast-paced e-commerce platforms.
- Hands-on proficiency with enterprise GRC tools, ticketing workflows, and data visualization/dashboarding tools.