Manager, Security Governance, Risk, and Compliance

The role

The Security GRC Manager will lead the evolution of cybersecurity risk management and control governance capabilities. This leader will establish scalable methodologies to identify, assess, prioritize, and monitor cybersecurity risks across a complex technology environment.

What you will do

• Drive scalable methodologies to identify, assess, prioritize, monitor, and escalate cybersecurity risks.
• Partner with AI GRC to maintain a unified risk taxonomy and governance framework.
• Maintain an actionable enterprise risk register through automated data feeds.
• Establish Key Risk Indicators and management reporting.
• Establish and mature the cybersecurity control governance framework.
• Partner with Control Assurance to integrate testing trends into risk assessments.
• Drive control framework harmonization across global regulatory requirements.
• Collaborate with Control Assurance for automated control validation.
• Lead, mentor, and scale a high-performing Security GRC team.
• Partner with risk owners to establish remediation plans and challenge risk acceptance decisions.

Required qualifications

• 6+ years of progressive experience in cybersecurity governance, risk management, security engineering, or a related field.
• Demonstrated experience building or maturing cybersecurity risk management capabilities in complex, high-scale technology environments.
• Proven experience leading teams, strategic initiatives, and cross-functional programs.
• Bachelor’s degree in a related field or equivalent professional experience.
• Working knowledge of cybersecurity and AI governance frameworks, including NIST CSF, NIST AI RMF, ISO 42001, and ISO 27001.
• Direct experience managing enterprise risk registers, overseeing remediation/treatment lifecycles, and reporting material risk exposure.
• Deep expertise in cybersecurity governance, risk management, and control frameworks.
• Proven track record establishing risk assessment methodologies, risk registers, risk treatment workflows, and executive reporting.
• Demonstrated ability to evolve periodic assessments toward continuous, data-driven risk management and evidence-based risk oversight.
• Strong understanding of control design, effectiveness testing, and the relationship between control performance and residual risk.
• Excellent communication and stakeholder management skills.
• Experience leading cross-functional initiatives and mentoring governance, risk, or security professionals.

Nice to have

• Hands-on security engineering experience
• Experience in writing java/spring boot applications in AWS and Kubernetes environment
• Experience in application security/product security in building Static and dynamic security testing tools, container scanning pipelines, open-source software vulnerabilities remediation pipelines, Kub
• Experience in leading/mentoring other engineers to build a security or infrastructure service from scratch
• Experience identifying, testing, and remediating against vulnerabilities including those found in the OWASP Top 10 and CWE/SANS Top 25, writing exploits and verification

Benefits

• Medical/Dental/Vision/Life, AD&D insurance
• Flexible Spending Accounts (FSA) & Health Savings Account (HAS)
• Long-term/Short-term Disability
• Employee Assistance Program (EAP) program
• 401K Plan with Company Match
• 18-21 days of Paid Time Off (PTO) a year based on the tenure
• 12 Paid Holidays
• Paid Parental leave
• Pre-tax commuter benefits
• MTV- [Free] Electric Car Charging Station

Before you apply

• Application Review
• Job Fit Interview
• Focus Interview
• Offer

About the company

Coupang is a commerce company with a startup culture and the resources of a large global public company. They aim to disrupt the commerce industry by making shopping, eating, and living easier.