Senior Risk Specialist (Security GRC Specialist)

The role

The Security GRC Specialist supports the execution and operationalization of cybersecurity governance, risk management, and compliance programs. This person will maintain risk visibility, support regulatory compliance, and execute technical risk and governance workflows.

What you will do

• Support compliance operations for domestic and international frameworks.
• Serve as a key point of contact for internal and external audits.
• Monitor evolving regulatory and industry requirements.
• Conduct technical risk assessments for infrastructure, services, vendors, and technology initiatives.
• Maintain and enhance the enterprise Security Risk Register.
• Partner with Security Engineering, IT, and platform teams to drive remediation.
• Assist in updating cybersecurity policies.
• Maintain central governance repositories.
• Generate executive-level GRC metrics and dashboards.

Required qualifications

• 6+ years of hands-on experience in Cybersecurity GRC, Information Security, IT Risk Management, or IT Audit.
• Direct experience executing Korean regulatory and certification compliance operations alongside global standards.
• Proven track record of conducting technical risk assessments, managing enterprise risk registers, and driving remediation workflows.
• Strong organizational, analytical, and evidence-management skills with high attention to detail.
• Bachelor’s degree in Computer Science, Information Security, Information Systems, or equivalent practical experience.

Nice to have

• Native or bilingual proficiency in Korean with professional working proficiency in English.
• Experience in high-scale cloud environments or fast-paced e-commerce platforms.
• Hands-on proficiency with enterprise GRC tools, ticketing workflows, and data visualization/dashboarding tools.

Before you apply

• Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
• Hiring may be restricted in case the legal qualifications required for hiring and work performance is not met.
• Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information.

About the company

Coupang is a commerce company with a startup culture and the resources of a large global public company. They aim to disrupt the commerce industry by making shopping, eating, and living easier.