Security GRC Specialist

• Continuous Risk Methodologies: Develop and operationalize continuous cybersecurity risk management methodologies that move beyond periodic assessments toward ongoing, evidence-based risk visibility.
• Data-Driven Modeling & Telemetry: Build and maintain data-driven risk models, indicators, and dashboards to identify emerging threats, systemic weaknesses, control gaps, and changes in residual risk.
• Signal & Impact Correlation: Connect technical risk signals, control effectiveness data, and business impact to prioritize risks and inform risk treatment decisions.
• Risk Governance & Registers: Establish and continuously improve cybersecurity risk assessment methodologies, risk registers, risk scoring algorithms, and risk acceptance governance.
• Runtime & Automated Telemetry: Partner with Security and Engineering teams to identify opportunities for runtime risk monitoring, automated risk signals, and the integration of security telemetry into risk management workflows.
• Unified AI & Cyber Alignment: Collaborate with AI GRC to develop common risk assessment methodologies, control governance principles, and reporting practices across AI and cybersecurity.
• Assurance Integration: Partner with the Control Assurance team to incorporate assurance findings and control performance data into ongoing risk assessments and management reporting.
• Systemic Remediation: Identify systemic risk patterns and recurring control weaknesses, providing actionable recommendations to improve the organization’s overall risk posture.

What You Will Need

• Strong expertise in cybersecurity risk management, security governance, or technology risk in high-scale technology environments.
• Hands-on experience with continuous risk monitoring, runtime risk assessment, security telemetry, risk analytics, or data-driven control effectiveness measurement.
• Proven ability to translate technical security signals, cloud vulnerabilities, and control deficiencies into meaningful business risk insights.
• Deep understanding of cybersecurity control frameworks, risk quantification/assessment methodologies, and residual risk management.
• Strong analytical, problem-solving, and cross-functional stakeholder management skills.
• Technical background in security engineering, cloud security, application security, security architecture, or security analytics is a strong plus.
• Self-starter mindset with the ability to influence engineering teams and drive technical governance initiatives without direct authority.

Basic Qualifications

• 6+ years of relevant experience in cybersecurity, technology risk management, security engineering, or cybersecurity GRC.
• Demonstrated track record developing or implementing risk management methodologies, continuous monitoring capabilities, or data-driven security risk programs.
• Working knowledge of cybersecurity and AI governance frameworks (e.g., NIST CSF, NIST AI RMF, ISO 42001, ISO 27001) as well as relevant statutory/regulatory requirements.
• Direct experience collaborating with engineering teams to translate telemetry, control performance, or architectural data into risk insights.
• Bachelor’s degree in a related field or equivalent professional experience.

• Experience in application security/product security in building Static and dynamic
• Experience in writing java/spring boot applications in AWS and Kubernetes environment
• security testing tools, container scanning pipelines, open-source software vulnerabilities
• remediation pipelines, Kubernetes security
• Experience in leading/mentoring other engineers to build a security or infrastructure
• service from scratch
• Experience identifying, testing, and remediating against vulnerabilities including those
• found in the OWASP Top 10 and CWE/SANS Top 25, writing exploits and verification

• Annual bonus is 0-20% of the base salary
• Medical/Dental/Vision/Life, AD&D insurance
• Flexible Spending Accounts (FSA) & Health Savings Account (HAS)
• Long-term/Short-term Disability
• Employee Assistance Program (EAP) program
• 401K Plan with Company Match
• 18-21 days of Paid Time Off (PTO) a year based on the tenure
• 12 Paid Holidays
• Paid Parental leave
• Pre-tax commuter benefits
• MTV- [Free] Electric Car Charging Station

“Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale.

• Application Review – Job Fit Interview - Focus Interview – Offer
• The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
• Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.

• This job posting may be closed prior to the stated end date for application if all openings are filled.
• Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
• Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.

Privacy Notice

Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/

• Coupang is an equal opportunity employer. Our unprecedented success could not be possible without the valuable inputs of our globally diverse team.

Job Requisition ID: R0081044

Please complete the attached Internal Transfer Request Form and submit.

Please make sure to apply with your Coupang e-mail address.