Director, Cybersecurity Audit & Continuous Assurance

About the role

Coupang is looking for a highly qualified, technical and data-driven Director of Cybersecurity Audit & Continuous Assurance (Technical Program Management) to join its IT Internal Audit leadership team in Seoul, South Korea. Reporting directly to the Head of IT Audit, the role acts as Subject Matter Expert for enterprise cybersecurity risks and technical audit execution across Coupang's high-scale, cloud-native e-commerce platforms. It leads the global cybersecurity audit strategy and builds a Continuous Cybersecurity Control Monitoring (CCCM) and Automated Assurance Validation framework.

Key responsibilities

• Help develop and run the enterprise cybersecurity audit plan, adapting coverage to emerging threats, architectural changes and regulatory requirements.
• Lead technical audits of cloud security, IAM, zero-trust, CI/CD pipelines, container security, network telemetry and DLP.
• Act as principal SME for security engineering, cryptography, SOC, threat hunting and vulnerability management.
• Work with Information Security, Compliance, Privacy, Cloud Platform Engineering, Infrastructure and Software Engineering to mitigate risks and fix audit findings.
• Deliver data-backed reports and briefings to leadership.
• Architect and implement continuous cybersecurity control monitoring, moving high-risk controls from periodic manual sampling to near-real-time automated validation.
• Build custom security control dashboards and risk observability tools using SIEM and data lake log ingestion to detect control drift and policy non-compliance.
• Set standardized technical audit methodologies, script repositories, automated testing SOPs and analytics frameworks for IT Audit.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, IT, Computer Engineering or a quantitative data field.
• 12+ years of progressive experience in cybersecurity engineering, cyber risk or technical cybersecurity auditing in large-scale or publicly traded tech/e-commerce organizations.
• Based in or willing to relocate to Seoul, South Korea.
• Fluent English with strong technical communication skills.

Required skills

• Cloud security (AWS/Azure), distributed systems, API security, microservices, Kubernetes/Docker.
• Security frameworks: NIST CSF, ISO/IEC 27001/27002, CIS Benchmarks, NIST 800-53, ISMS/K-ISMS-P.
• Preferred: continuous auditing/monitoring systems, SQL, Python, SIEM (Splunk, Elastic Search), data warehouses (Snowflake, AWS Athena/Redshift), and familiarity with Korean privacy regulations (K-ISMS-P, PIPA).