Security GRC Specialist

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we are collectively disrupting the multi-billion-dollar commerce industry from the ground up and establishing an unparalleled reputation for being leading and reliable force in South Korean commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact.

At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Role Overview

The Security GRC Specialist will help advance Coupang’s cybersecurity risk management capabilities, with a focus on continuous risk monitoring, data-driven risk assessment, and control governance. This role will develop scalable approaches to identify, quantify, and monitor cybersecurity risks using technical signals, control performance data, and real-time risk indicators. Working closely with AI GRC, Security Engineering, Control Assurance, and Security Architecture, this individual will help establish a unified risk management and control governance framework across AI and cybersecurity, translating complex technical risks into actionable insights and measurable risk reduction.

What You Will Do

• Continuous Risk Methodologies: Develop and operationalize continuous cybersecurity risk management methodologies that move beyond periodic assessments toward ongoing, evidence-based risk visibility.
• Data-Driven Modeling & Telemetry: Build and maintain data-driven risk models, indicators, and dashboards to identify emerging threats, systemic weaknesses, control gaps, and changes in residual risk.
• Signal & Impact Correlation: Connect technical risk signals, control effectiveness data, and business impact to prioritize risks and inform risk treatment decisions.
• Risk Governance & Registers: Establish and continuously improve cybersecurity risk assessment methodologies, risk registers, risk scoring algorithms, and risk acceptance governance.
• Runtime & Automated Telemetry: Partner with Security and Engineering teams to identify opportunities for runtime risk monitoring, automated risk signals, and the integration of security telemetry into risk management workflows.
• Unified AI & Cyber Alignment: Collaborate with AI GRC to develop common risk assessment methodologies, control governance principles, and reporting practices across AI and cybersecurity.
• Assurance Integration: Partner with the Control Assurance team to incorporate assurance findings and control performance data into ongoing risk assessments and management reporting.
• Systemic Remediation: Identify systemic risk patterns and recurring control weaknesses, providing actionable recommendations to improve the organization’s overall risk posture.

What You Will Need

• Strong expertise in cybersecurity risk management, security governance, or technology risk in high-scale technology environments.
• Hands-on experience with continuous risk monitoring, runtime risk assessment, security telemetry, risk analytics, or data-driven control effectiveness measurement.
• Proven ability to…