Security GRC Lead: Enterprise Risk & Compliance

Coupang, Inc.; Mountain View (WY); On-site; USD 164,000 - 282,000; Full time

Benefits offered by this job

Annual bonus 0-20%

Medical/Dental/Vision/Life insurance

401K with company match

PTO 18–21 days per year

Paid holidays

Paid parental leave

Pre‑tax commuter benefits

EV charging station

Job summary

Coupang is seeking a Security GRC Manager in the United States to lead cybersecurity risk management and control governance initiatives. You will drive scalable risk methodologies, collaborate with AI GRC, and establish a unified enterprise risk framework for continuous, data‑driven risk oversight.

You will partner with Security Engineering, Architecture, and product teams to embed risk accountability in software development and operations, while leading a high‑performing GRC team and delivering

Qualifications

• Proven experience in cybersecurity governance, risk management, and control frameworks.
• Ability to translate technical weaknesses into business risk.
• Experience building risk registers, assessment methodologies, and executive reporting.
• Strong communication and stakeholder management to influence senior leaders.

Responsibilities

• Drive scalable risk identification, assessment, prioritization, monitoring, and elevation of cybersecurity risks across high‑scale tech environments.
• Partner with AI GRC to harmonize risk taxonomy and governance with global standards.
• Maintain an actionable enterprise risk register with data feeds and remediation ties.
• Establish KRIs and reporting to translate findings into business risk insights.
• Define and mature the cybersecurity control governance framework and ownership expectations.
• Ingest testing trends and deficiencies into risk assessments without duplicating audits.
• Drive harmonization of controls across regulatory requirements for traceability.
• Lead automated control validation and real‑time posture monitoring with Control Assurance.
• Develop and mentor a high‑performing Security GRC team and drive strategic roadmaps.

Skills

Cybersecurity governance

Risk management

Control governance

Executive reporting

Team leadership

Education

Bachelor's degree

Tools

NIST CSF

NIST AI RMF

ISO 27001

ISO 42001

Job description

Coupang is seeking a Security GRC Manager in the United States to lead cybersecurity risk management and control governance initiatives. You will drive scalable risk methodologies, collaborate with AI GRC, and establish a unified enterprise risk framework for continuous, data‑driven risk oversight.

You will partner with Security Engineering, Architecture, and product teams to embed risk accountability in software development and operations, while leading a high‑performing GRC team and delivering