Director, Cybersecurity Audit & Continuous Assurance (Technical Program Management)

About the role

Coupang is looking for a Director of Cybersecurity Audit & Continuous Assurance (Technical Program Management) to join its IT Internal Audit leadership team in Seoul, reporting directly to the Head of IT Audit. The role acts as a subject matter expert for enterprise cybersecurity risks and technical audit execution across Coupang's high-scale, cloud-native e-commerce platforms, leading the global cybersecurity audit strategy and building a continuous control monitoring and automated assurance framework.

Key responsibilities

• Help develop and run the enterprise cybersecurity audit plan, adapting coverage to new threats, architectural changes and regulatory requirements
• Lead technical audits of cloud security, IAM, zero-trust, CI/CD pipelines, container security, network telemetry and DLP
• Act as principal SME for security engineering, cryptography, SOC, threat hunting and vulnerability management
• Work with Information Security, Compliance, Privacy, Cloud Platform Engineering, Infrastructure and Software Engineering to mitigate risks and fix audit findings
• Deliver data-backed reports and briefings to leadership
• Architect and implement continuous cybersecurity control monitoring, moving high-risk controls from periodic sampling to near-real-time automated validation
• Build custom control dashboards and risk observability tools using SIEM and data lake log ingestion
• Set up standardized audit methodologies, script repositories, automated testing SOPs and analytics frameworks for IT Audit

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, IT, Computer Engineering or a quantitative data field
• 12+ years of progressive experience in cybersecurity engineering, cyber risk or technical cybersecurity auditing in large-scale or publicly traded tech/e-commerce companies
• Based in or willing to relocate to Seoul
• Fluent English with strong technical communication

Required skills

• Cloud security (AWS/Azure), microservices, Kubernetes/Docker, API security
• NIST CSF, ISO/IEC 27001/27002, CIS Benchmarks, NIST 800-53, ISMS/K-ISMS-P
• Preferred: SQL, Python, SIEM (Splunk, Elastic), data warehouses (Snowflake, AWS Athena/Redshift)
• Preferred: CISSP, CISA, CISM, CRISC, CCSP; knowledge of Korean privacy regulations (K-ISMS-P, PIPA); Korean language is a plus