Principal, Risk [L6] (Security GRC)

The role

This role involves operating and inspecting information security management systems according to global certification standards and company policies. The specialist will lead regulatory compliance and certification activities to improve the organization's information security level.

What you will do

• Support information security and personal information protection regulatory compliance activities
• Handle external agency responses and related reporting tasks
• Manage telecommunications disaster management tasks
• Lead certification acquisition and maintenance activities including ISMS-P, ISO 27x, CBPR, SOC2, and CSP

Required qualifications

• 8+ years of experience in establishing and operating information security and information protection management systems
• Understanding of Korean and international information security and personal information protection laws and regulations
• Communication skills to deliver and guide security concepts clearly to all employees
• Willingness to learn new tasks quickly with meticulousness and responsibility
• Bachelor's degree

Nice to have

• Completion of training or possession of certifications for information security management systems (e.g., ISMS-P, ISO27001)
• Experience in security policy and standard development, implementation, and lifecycle management
• Experience in technical security controls validation and risk assessment based on understanding of IT infrastructure, web/app services, and AWS cloud environments
• Korean and English proficiency (verbal and written communication)

Before you apply

• This posting is exclusively for internal employees
• Must complete the attached Internal Transfer Request Form
• Must submit via Coupang email address

About the company

Coupang exists to realize customer wonder. It is a global large-scale listed company based on startup culture, driving innovation across the e-commerce industry.