Senior IT Internal Auditor

The role

The Senior IT Internal Auditor will lead and support global IT risk and control evaluations for ICFR and complex IT operational areas. This role uses data analytics, workflow automation, and AI-driven tools to evaluate cybersecurity postures and deliver risk insights across cloud-native and engineering environments.

What you will do

• Execute reviews of internal control documentation, technical Risk and Control Matrices, and remediation blueprints.
• Drive risk assessments and technical control evaluations across enterprise systems, cloud architecture, and infrastructure.
• Design and execute technical testing of ITGCs, automated application controls, API integrations, and IAM.
• Identify and implement opportunities to automate audit workflows and integrate Generative AI / LLM tools.
• Communicate technical risk findings to Internal Audit Leadership and business stakeholders.
• Coordinate technical testing scopes with external auditors.
• Partner with Information Security, DevOps, Engineering, and IT Compliance teams to identify control gaps and oversee remediation.

Required qualifications

• Bachelor's degree in computer science, Management Information System, Accounting, Cybersecurity, Data Analytics, or related fields.
• Minimum of 3 - 5 years of IT audit, cybersecurity audit, or IT risk consulting experience.
• At least one active professional certification: CISA, CISSP, CRISC, CISM, CIA, or AWS/GCP Cloud Certifications.
• Bilingual fluency in English and Korean (spoken, written, and technical reading/writing).

Nice to have

• Prior experience working in a fast-paced U.S.- listed tech/e-commerce company or Big 4 IT risk advisory practice.
• Hands-on experience auditing microservices architectures, CI/CD pipelines, containerization (Kubernetes, Docker), or cloud environments (AWS/GCP).
• Experience developing continuous auditing scripts or machine learning models for fraud and anomaly detection.
• Deep knowledge of IT internal control frameworks (COBIT, NIST CSF, ISO 27001, SOC 1/SOC. 2, CIS Benchmarks) and strong hands-on experience evaluating ITGCs, cloud security configurations, and identity
• Proficiency in SQL, Python, R, or advanced analytics platforms (Tableau, Power BI, Alteryx).
• Familiarity with audit automation frameworks (RPA, script-driven testing) and practical exposure to leveraging AI/ML tools.
• Excellent written and verbal communication skills.
• Proven track record of managing multi-threaded technical audit engagements in fast-paced e-commerce or tech environments.

About the company

Coupang is a company that aims to disrupt the commerce industry by making shopping, eating, and living easier. It offers a startup culture with the resources of a large global public company.