Security GRC Manager - Enterprise Risk & Compliance

Coupang, Inc.; Mountain View (CA); On-site; USD 164,000 - 282,000; Full time

Benefits offered by this job

Annual bonus

Medical/Dental/Vision

401K match

PTO 18-21 days

Paid holidays

Parental leave

Commuter benefits

EV charging

Job summary

Coupang, Inc. is seeking a Security GRC Manager to lead cybersecurity risk management across its complex technology environment in the United States.

You will establish scalable risk methodologies, align with AI GRC, and drive continuous, data-driven risk visibility with clear executive reporting. Collaborating with Security Engineering, AI teams, and Control Assurance, you will shape enterprise risk governance, own risk treatment plans, and mentor a growing team dedicated to robust control

Qualifications

• 6+ years in cybersecurity governance, risk management, or security engineering.
• Experience building enterprise risk registers and remediation lifecycles.
• Proven ability to evolve assessments toward continuous risk oversight.
• Knowledge of NIST CSF, NIST AI RMF, ISO 27001, ISO 42001.
• Excellent communication and stakeholder management.
• Experience leading cross-functional teams.

Responsibilities

• Drive end-to-end risk lifecycle across high-scale technology environments.
• Partner with AI GRC to unify risk taxonomy and governance.
• Maintain enterprise risk register with automated data feeds.
• Establish risk metrics and executive reporting.
• Lead, mentor, and scale Security GRC team.
• Embed risk accountability into software development and operations.

Skills

Cybersecurity governance

Risk management

Security engineering

Cross-functional leadership

Stakeholder management

Cloud infrastructure

Education

Bachelor’s degree or equivalent

Tools

AWS

Kubernetes

Java/Spring Boot

Security testing tools

Job description

Coupang, Inc. is seeking a Security GRC Manager to lead cybersecurity risk management across its complex technology environment in the United States.

You will establish scalable risk methodologies, align with AI GRC, and drive continuous, data-driven risk visibility with clear executive reporting. Collaborating with Security Engineering, AI teams, and Control Assurance, you will shape enterprise risk governance, own risk treatment plans, and mentor a growing team dedicated to robust control