Director, Director, Cybersecurity Audit & Continuous Assurance (Technical Program Management)

The role

This leader will lead the execution of the global cybersecurity audit strategy and architect an advanced Continuous Cybersecurity Control Monitoring and Automated Assurance Validation framework. The role involves technical audits of cloud-native e-commerce platforms and developing methods to mitigate cyber risks across microservice-based systems.

What you will do

• Assist in development and execution of the enterprise cybersecurity audit plan.
• Lead technical audits covering cloud security, IAM, zero-trust, CI/CD, containers, network telemetry, and DLP.
• Act as the principal SME for security engineering, cryptography, SOC, threat hunting, and vulnerability management.
• Partner with Information Security, Compliance, Privacy, and Engineering leadership to drive risk mitigation.
• Provide data-backed reports and briefings to leadership stakeholders.
• Architect and lead the implementation of a continuous cybersecurity control monitoring strategy.
• Design scripts, queries, and automated testing routines for near-real-time automated validation.
• Develop custom security control dashboards and risk observability tools using automated log ingestion.
• Establish standardized technical audit methodologies, script repositories, and analytics frameworks.

Required qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Computer Engineering, or a quantitative data field.
• 12+ years of progressive experience in cybersecurity engineering, cyber risk, or technical cybersecurity auditing within large-scale or publicly traded technology/e-commerce organizations.
• Strong hands-on knowledge of cloud security architectures (AWS/Azure), distributed systems, modern API security, microservices, and containerized deployments (Kubernetes/Docker).
• Deep technical mastery of recognized security frameworks (NIST CSF, ISO/IEC 27001/27002, CIS Benchmarks, NIST 800-53, ISMS/K-ISMS-P).
• Based in (or willing to relocate as an expatriate to) Seoul, South Korea.
• Fluent in English with strong technical communication skills.

Nice to have

• Experience building or managing continuous auditing/monitoring systems, data analytics pipelines, or security control observability frameworks using SQL, Python, or data platform tools.
• Active professional security credentials such as CISSP, CISA, CISM, CRISC, or CCSP.
• Track record auditing or securing hyper-scale e-commerce platforms, payment systems (PCI-DSS), or high-volume transactional microservice environments.
• Experience utilizing SIEM platforms (e.g., Splunk, Elastic Search) or cloud data warehouses (e.g., Snowflake, AWS Athena/Redshift).
• Familiarity leveraging AI/ML tooling or intelligent automation for anomaly detection, evidence extraction, and risk profiling.
• Knowledge of Korean cybersecurity/privacy regulatory landscapes (K-ISMS-P, PIPA).
• Working knowledge or professional proficiency in the Korean language.

About the company

Coupang is an equal opportunity employer with a globally diverse team.