{"id":3166542,"url":"https://alion.io/job/coupang-security-grc-specialist","title":"Security GRC Specialist","company":{"id":239,"name":"Coupang","domain":"coupang.com","url":"https://alion.io/company/coupang","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":111,"ghost_share":0.072,"stale_share":0.126,"repost_share":0.126,"time_to_fill_p50_days":76,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mountain View, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":164000,"max":282000,"currency":"USD","period":"year","gross":null,"usd_annual":282000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"AWS","optional":true},{"name":"Java","optional":true},{"name":"Kubernetes","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Spring Boot","optional":true}],"status":"live","first_seen_at":"2026-10-23T17:14:22Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-28T11:16:57Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we are collectively disrupting the multi-billion-dollar commerce industry from the ground up and establishing an unparalleled reputation for being leading and reliable force in South Korean commerce.\nWe are proud to have the best of both worlds - a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.\nOur mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.\nRole Overview\nThe Security GRC Specialist will help advance Coupang’s cybersecurity risk management capabilities, with a focus on continuous risk monitoring, data-driven risk assessment, and control governance. This role will develop scalable approaches to identify, quantify, and monitor cybersecurity risks using technical signals, control performance data, and real-time risk indicators. Working closely with AI GRC, Security Engineering, Control Assurance, and Security Architecture, this individual will help establish a unified risk management and control governance framework across AI and cybersecurity, translating complex technical risks into actionable insights and measurable risk reduction.\nWhat You Will Do\nContinuous Risk Methodologies: Develop and operationalize continuous cybersecurity risk management methodologies that move beyond periodic assessments toward ongoing, evidence-based risk visibility.\nData-Driven Modeling & Telemetry: Build and maintain data-driven risk models, indicators, and dashboards to identify emerging threats, systemic weaknesses, control gaps, and changes in residual risk.\nSignal & Impact Correlation: Connect technical risk signals, control effectiveness data, and business impact to prioritize risks and inform risk treatment decisions.\nRisk Governance & Registers: Establish and continuously improve cybersecurity risk assessment methodologies, risk registers, risk scoring algorithms, and risk acceptance governance.\nRuntime & Automated Telemetry: Partner with Security and Engineering teams to identify opportunities for runtime risk monitoring, automated risk signals, and the integration of security telemetry into risk management workflows.\nUnified AI & Cyber Alignment: Collaborate with AI GRC to develop common risk assessment methodologies, control governance principles, and reporting practices across AI and cybersecurity.\nAssurance Integration: Partner with the Control Assurance team to incorporate assurance findings and control performance data into ongoing risk assessments and management reporting.\nSystemic Remediation: Identify systemic risk patterns and recurring control weaknesses, providing actionable recommendations to improve the organization’s overall risk posture.\nWhat You Will Need\nStrong expertise in cybersecurity risk management, security governance, or technology risk in high-scale technology environments.\nHands-on experience with continuous risk monitoring, runtime risk assessment, security telemetry, risk analytics, or data-driven control effectiveness measurement.\nProven ability to translate technical security signals, cloud vulnerabilities, and control deficiencies into meaningful business risk insights.\nDeep understanding of cybersecurity control frameworks, risk quantification/assessment methodologies, and residual risk management.\nStrong analytical, problem-solving, and cross-functional stakeholder management skills.\nTechnical background in security engineering, cloud security, application security, security architecture, or security analytics is a strong plus.\nSelf-starter mindset with the ability to influence engineering teams and drive technical governance initiatives without direct authority.\nBasic Qualifications\n6+ years of relevant experience in cybersecurity, technology risk management, security engineering, or cybersecurity GRC.\nDemonstrated track record developing or implementing risk management methodologies, continuous monitoring capabilities, or data-driven security risk programs.\nWorking knowledge of cybersecurity and AI governance frameworks (e.g., NIST CSF, NIST AI RMF, ISO 42001, ISO 27001) as well as relevant statutory/regulatory requirements.\nDirect experience collaborating with engineering teams to translate telemetry, control performance, or architectural data into risk insights.\nBachelor’s degree in a related field or equivalent professional experience.\nPreferred Qualifications\nExperience in application security/product security in building Static and dynamic\nExperience in writing java/spring boot applications in AWS and Kubernetes environment\nsecurity testing tools, container scanning pipelines, open-source software vulnerabilities\nremediation pipelines, Kubernetes security\nExperience in leading/mentoring other engineers to build a security or infrastructure\nservice from scratch\nExperience identifying, testing, and remediating against vulnerabilities including those\nfound in the OWASP Top 10 and CWE/SANS Top 25, writing exploits and verification\nPay & Benefits\nOur compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation.\nThe base pay for this position ranges from $164,000/year in our lowest geographic market to $282,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience.\nGeneral Description of All Benefits\nAnnual bonus is 0-20% of the base salary\nMedical/Dental/Vision/Life, AD&D insurance\nFlexible Spending Accounts (FSA) & Health Savings Account (HAS)\nLong-term/Short-term Disability\nEmployee Assistance Program (EAP) program\n401K Plan with Company Match\n18-21 days of Paid Time Off (PTO) a year based on the tenure\n12 Paid Holidays\nPaid Parental leave\nPre-tax commuter benefits\nMTV- [Free] Electric Car Charging Station\nGeneral Description of Other Compensation\n“Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale.\nRecruitment Process\nApplication Review - Job Fit Interview - Focus Interview - Offer\nThe exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.\nInterview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.\nDetails to Consider\nThis job posting may be closed prior to the stated end date for application if all openings are filled.\nCoupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.\nThose eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.\nPrivacy Notice\nYour personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/\nCoupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender(including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate.\nIf you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at .\nEqual Opportunities for All\nCoupang is an equal opportunity employer. Our unprecedented success could not be possible without the valuable inputs of our globally diverse team.\nJob Requisition ID: R0081044","description_format":"text","description_chars":8771,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Delivery","Marketplaces","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-23T17:31:51Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":76,"reasons":["conf:4","velocity","win:early","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":282000,"is_top_pay":true},"html_url":"https://alion.io/job/coupang-security-grc-specialist","json_url":"https://alion.io/job/coupang-security-grc-specialist.json","meta":{"generated_at":"2026-10-28T12:15:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16132,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":239},"rest":"https://alion.io/mcp/rest/get_company?id=239"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcoupang-security-grc-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcoupang-security-grc-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcoupang-security-grc-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/coupang-security-grc-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcoupang-security-grc-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3166542}},{"tool":"search_jobs","arguments":{"company":"coupang.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3166542},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}