greenhouse
Manager, Security Governance, Risk, and Compliance
Coupang
USA
Manager · 6+ years experience
Onsite
Discovered Today
awskubernetesspring-boot
Key Skills for This Role
awskubernetesspring-boot
Full Job Posting
What You Will Do
- Enterprise Cybersecurity & AI Risk Management
- End-to-End Risk Lifecycle: Drive scalable methodologies to identify, assess, prioritize, monitor, and escalate cybersecurity risks across high-scale technology environments.
- Unified Cyber & AI Framework: Partner closely with AI GRC to maintain a unified risk taxonomy and governance framework, harmonizing global industry standards (e.g., NIST CSF, NIST AI RMF, ISO 27001, ISO 42001) with local and regional regulatory obligations.
- Continuous, Data-Driven Visibility: Maintain an actionable enterprise risk register connecting inherent risks, control gaps, treatment plans, and residual exposure through automated data feeds.
- Executive Metrics & Reporting: Establish Key Risk Indicators and management reporting to translate technical findings, assurance results, and emerging threats into actionable business risk insights.
- Control Governance & Monitoring
- Control Lifecycle & Standards: Establish and mature the cybersecurity control governance framework, defining control objectives, ownership expectations, and effectiveness criteria.
- Assurance & Root-Cause Integration: Partner with Control Assurance to ingest testing trends and systemic control deficiencies into risk assessments without duplicating operational audit testing.
- Harmonization & Traceability: Drive control framework harmonization across global regulatory requirements and internal standards to improve traceability and eliminate duplication.
- Continuous Control Monitoring: Collaborate with Control Assurance to define priorities for automated control validation and real-time posture tracking.
- Team Leadership & Stakeholder Accountability
- Team Development: Lead, mentor, and scale a high-performing Security GRC team, setting strategic roadmaps, clear ownership, and measurable delivery standards.
- Constructive Challenge: Partner with accountable risk owners across the business to establish remediation plans, track progress, and constructively challenge risk acceptance decisions.
- Culture & Influence: Influence cross-functional engineering, product, and leadership stakeholders to embed risk accountability directly into software development and business operations.
- What You Will Need
- Deep expertise in cybersecurity governance, risk management, and control frameworks, with the ability to translate technical weaknesses into business risk.
- Proven track record establishing risk assessment methodologies, risk registers, risk treatment workflows, and executive reporting.
- Demonstrated ability to evolve periodic assessments toward continuous, data-driven risk management and evidence-based risk oversight.
- Strong understanding of control design, effectiveness testing, and the relationship between control performance and residual risk.
- Excellent communication and stakeholder management skills, including the ability to constructively challenge risk decisions and influence senior leaders.
- Experience leading cross-functional initiatives and mentoring governance, risk, or security professionals.
- Technical understanding of cloud infrastructure, application security, and modern security controls (hands-on security engineering experience is a plus).
Basic Qualifications
- 6+ years of progressive experience in cybersecurity governance, risk management, security engineering, or a related field.
- Demonstrated experience building or maturing cybersecurity risk management capabilities in complex, high-scale technology environments.
- Proven experience leading teams, strategic initiatives, and cross-functional programs.
- Bachelor’s degree in a related field or equivalent professional experience.
- Working knowledge of cybersecurity and AI governance frameworks, including NIST CSF, NIST AI RMF, ISO 42001, and ISO 27001.
- Direct experience managing enterprise risk registers, overseeing remediation/treatment lifecycles, and reporting material risk exposure.
Preferred Qualifications
- Experience in writing java/spring boot applications in AWS and Kubernetes environment
- Experience in application security/product security in building Static and dynamic
- security testing tools, container scanning pipelines, open-source software vulnerabilities
- remediation pipelines, Kubernetes security
- Experience in leading/mentoring other engineers to build a security or infrastructure
- service from scratch
- Experience identifying, testing, and remediating against vulnerabilities including those
- found in the OWASP Top 10 and CWE/SANS Top 25, writing exploits and verification
- General Description of All Benefits
- Annual bonus is 0-20% of the base salary
- Medical/Dental/Vision/Life, AD&D insurance
- Flexible Spending Accounts (FSA) & Health Savings Account (HAS)
- Long-term/Short-term Disability
- Employee Assistance Program (EAP) program
- 401K Plan with Company Match
- 18-21 days of Paid Time Off (PTO) a year based on the tenure
- 12 Paid Holidays
- Paid Parental leave
- Pre-tax commuter benefits
- MTV- [Free] Electric Car Charging Station
- General Description of Other Compensation
- “Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale.
- Recruitment Process
- Application Review - Job Fit Interview - Focus Interview – Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.
- Details to Consider
- This job posting may be closed prior to the stated end date for application if all openings are filled.
- Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.
- Privacy Notice
- Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/
- Coupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender(including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate.
- If you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at [email protected].
- Equal Opportunities for All
- Coupang is an equal opportunity employer. Our unprecedented success could not be possible without the valuable inputs of our globally diverse team.
- Job Requisition ID: R0080970
- Please complete the attached Internal Transfer Request Form and submit.
- Please make sure to apply with your Coupang e-mail address.
About Coupang
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Coupang
Staff Security Engineer (AI GRC)
, USA
Discovered Today
Security GRC Specialist
, USA
Discovered Today
Sr.Director, Data Science
, USA
Discovered 1 weeks ago
Senior Software Engineer [L5]
Bengaluru, IND
Discovered 2 weeks agoFull-time
Staff Back-end Engineer
Hyderabad, IND
Discovered 2 weeks agoFull-time
Senior Software Engineer [L5]
Bengaluru, IND
Discovered 2 weeks agoFull-time
Staff Backend Engineer - Intelligent Cloud
Bengaluru, IND
Discovered 2 weeks agoFull-time
Senior Staff, Technical Program Manager
Bengaluru, IND
Discovered 2 weeks agoFull-time