Senior IT Internal Auditor

About the role

Coupang is looking for a Senior IT Internal Auditor in Seoul to lead and support global IT risk and control evaluations for Internal Controls over Financial Reporting (ICFR / US SOX) and complex IT operational areas. The role suits a tech-forward auditor who uses data analytics, workflow automation and AI-driven tools to strengthen continuous auditing, assess enterprise cybersecurity postures and deliver risk insights across Coupang's cloud-native and engineering environments.

Key responsibilities

• Review internal control documentation, technical Risk and Control Matrices and remediation plans in line with US SOX, US GAAP, PCAOB and Korean compliance standards.
• Drive risk assessments and control evaluations across enterprise systems, cloud architecture (AWS/GCP), containerized applications and infrastructure, covering financial reporting, IT operational security, data privacy (PIPA), disaster recovery and cyber threats.
• Design and run technical tests of IT general controls, automated application controls, API integrations, IAM and system-generated reports.
• Identify and help implement automation of routine audit workflows and use Generative AI / LLM tools for documentation, code reviews, script generation and control testing.
• Communicate technical risk findings to Internal Audit leadership and business/engineering stakeholders, and coordinate technical testing with external auditors.
• Partner with Information Security, DevOps, Engineering, Financial Controls and IT Compliance teams to find control gaps, root-cause analyse issues and oversee remediation.

Required profile

• Bachelor's degree in computer science, MIS, accounting, cybersecurity, data analytics or a related field.
• 3-5 years of IT audit, cybersecurity audit or IT risk consulting experience.
• At least one active professional certification: CISA, CISSP, CRISC, CISM, CIA or AWS/GCP cloud certifications.
• Bilingual fluency in English and Korean (spoken, written and technical reading/writing).
• Full-time regular position with a 12-week probation period, which may be shortened or extended.

Preferred qualifications

• Experience in a fast-paced U.S.-listed tech/e-commerce company or a Big 4 IT risk advisory practice.
• Auditing microservices, CI/CD pipelines, Kubernetes/Docker or AWS/GCP environments.
• Continuous auditing scripts or ML models for fraud and anomaly detection.
• Knowledge of COBIT, NIST CSF, ISO 27001, SOC 1/2, CIS Benchmarks and hands-on ITGC and cloud security evaluation.
• SQL, Python, R, Tableau, Power BI, Alteryx, PostgreSQL, MySQL, Snowflake, BigQuery, RPA and familiarity with LLMs and prompt engineering.