Staff AI Security Governance Engineer (AI GRC)

About the role

Coupang is looking for a Staff AI Security Governance Engineer to lead the AI Governance, Risk Management & Compliance (AI GRC) effort in Seoul. The role bridges complex AI regulatory requirements with technical security architecture, defining frameworks, policies, and guardrails for AI development.

Key responsibilities

• Design and maintain an AI Security & Risk Management Framework aligned with NIST AI RMF, ISO 42001, MSIT guidelines, and global AI Acts.
• Architect policy‑as‑code rule sets and security baseline specifications for deployment across AI pipelines.
• Define technical control criteria and validation logic for the Control Assurance team.
• Identify, assess, and mitigate AI‑specific threat vectors such as prompt injection, training data leakage, model extraction, shadow AI, and supply‑chain vulnerabilities.
• Partner with AI platform, infrastructure, and security teams to embed governance into architectures, CI/CD workflows, and runtime environments.
• Own the enterprise AI policy lifecycle, establishing decision frameworks for model adoption, data‑privacy guardrails, and cross‑border data transfer requirements.

Required profile

• Bachelor’s degree in Computer Science, Information Security, Software Engineering or a related technical/policy field.
• 10+ years of experience in Information Security, Technical GRC, Security Architecture, or AI/Cloud Governance.
• Deep understanding of AI/ML security risks, cloud security architecture (AWS), and privacy/data‑protection principles.
• Proven track record of architecting governance frameworks such as NIST AI RMF, ISO 42001, NIST CSF, and PIPA.
• Excellent written and verbal communication skills in English.

Required skills

• Policy‑as‑code specification development.
• Continuous control monitoring logic.
• AI/ML pipeline and LLM integration knowledge.
• Cloud security architecture, especially AWS.
• Familiarity with NIST AI RMF, ISO 42001, NIST CSF, and PIPA.