Coupang Corporate Counsel at Coupang to lead Engineering Controls, Operational Governance, IT SOX Compliance, Security, Privacy, and Technology Risk initiatives. Partner with engineering and audit teams to modernize compliance.
Responsibilities
Coupang is seeking a highly technical and execution-focused Staff Technical Program Manager to lead Engineering Controls, Operational Governance, IT SOX Compliance, Security, Privacy and Technology Risk initiatives across Coupang's technology ecosystem.
This role sits at the intersection of software engineering, DevOps, cloud infrastructure, operational excellence, compliance, and AI-enabled governance. The primary focus is ownership of IT SOX Change Management controls and serving as a Second Line of Defense (2LOD) partner to engineering teams by independently assessing control effectiveness, monitoring software deployment activities, identifying compliance risks, and driving scalable engineering controls.
As Coupang continues to evolve its engineering platform, this role will help modernize compliance through automation, analytics, engineering telemetry, and AI-driven monitoring. The TPM will build a control environment that improves risk visibility, audit readiness, and operational excellence while minimizing compliance friction for engineering teams.
Unlike traditional audit or compliance roles, this position requires deep expertise in modern software development, CI/CD, release management, cloud-native architectures, deployment automation, and engineering operations. The ideal candidate is a former Software Engineer, Platform Engineer, DevOps Engineer, or SRE who has transitioned into technical program leadership and can effectively partner with engineers, architects, security leaders, auditors, and executives.
Lead Change Management Governance
Own the strategy, governance framework, and roadmap for IT SOX Change Management controls across Coupang's software development lifecycle.
Evaluate release processes, CI/CD pipelines, and production deployments to ensure compliance requirements are consistently met.
Perform independent monitoring and oversight of deployment activities using engineering and compliance data.
Identify compliance exceptions, unauthorized changes, control failures, and process gaps through continuous monitoring.
Establish and improve controls related to:
Release Approvals
Segregation of Duties (SoD)
Qualification
Bachelor's degree in Computer ScienceExperience supporting SOXStrong program managementProficiency in public cloud platformsExperience leveraging data analyticsWorking knowledge of SOX
Required
Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical field.
10+ years of experience in Software Engineering, Technical Program Management, Platform Engineering, DevOps, SRE, or related technical leadership roles.
5+ years of experience leading large-scale cross-functional technical programs.
Previous hands-on experience as a Software Engineer, Platform Engineer, Infrastructure Engineer, SRE, DevOps Engineer, or equivalent technical role.
Experience operating in modern cloud-native software development environments.
Experience partnering with engineering organizations responsible for enterprise-scale software delivery.
Strong program management, stakeholder management, and executive communication skills.
Preferred
Deep expertise in modern software engineering practices, including SDLC, CI/CD, release management, change management, and platform engineering.
Strong experience with cloud-native architectures, Infrastructure as Code (IaC), site reliability engineering (SRE), and large-scale production operations.
Hands-on experience with DevOps and deployment technologies such as GitHub Actions, Jenkins, ArgoCD, Spinnaker, Azure DevOps, Kubernetes, and Terraform.
Proficiency in public cloud platforms, including AWS, Azure, or GCP.
Experience leveraging data analytics, observability, and automation to improve engineering performance, operational excellence, and risk visibility.
Demonstrated ability to design and implement AI-enabled compliance solutions, including continuous control monitoring, automated evidence collection, and risk analysis.
Working knowledge of SOX, ITGCs, change and access management controls, segregation of duties (SoD), and industry frameworks such as COBIT, COSO, NIST, and ISO 27001.
Professional certifications such as CISA, CISSP, CRISC, CIA, PMP, or cloud platform certifications are highly desirable.
