> Markdown version of [/jobs/ext/4285881-security-grc-specialist](https://www.wearedevelopers.com/jobs/ext/4285881-security-grc-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security GRC Specialist

- **Company:** Coupang, Inc.
- **Location:** Mountain View, CA, United States
- **Experience:** Expert
- **Salary:** $164,000.0 - $282,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Artificial Intelligence, Amazon Web Services, Cloud Computing Security, Cyber Security, Open Web Application Security, Spring-boot, Software Security, National Institute of Standards and Technology Cybersecurity Framework, Kubernetes, Data Analytics, Free and Open-Source Software
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=d1ba797acec9bcc3

## About the Role

* Strong expertise in cybersecurity risk management, security governance, or technology risk in high-scale technology environments.
 * Hands-on experience with continuous risk monitoring, runtime risk assessment, security telemetry, risk analytics, or data-driven control effectiveness measurement.
 * Proven ability to translate technical security signals, cloud vulnerabilities, and control deficiencies into meaningful business risk insights.
 * Deep understanding of cybersecurity control frameworks, risk quantification/assessment methodologies, and residual risk management.
 * Strong analytical, problem-solving, and cross-functional stakeholder management skills.
 * Technical background in security engineering, cloud security, application security, security architecture, or security analytics is a strong plus.
 * Self-starter mindset with the ability to influence engineering teams and drive technical governance initiatives without direct authority., * 6+ years of relevant experience in cybersecurity, technology risk management, security engineering, or cybersecurity GRC.
 * Demonstrated track record developing or implementing risk management methodologies, continuous monitoring capabilities, or data-driven security risk programs.
 * Working knowledge of cybersecurity and AI governance frameworks (e.g., NIST CSF, NIST AI RMF, ISO 42001, ISO 27001) as well as relevant statutory/regulatory requirements.
 * Direct experience collaborating with engineering teams to translate telemetry, control performance, or architectural data into risk insights.
 * Bachelor's degree in a related field or equivalent professional experience.

Preferred Qualifications

 * Experience in application security/product security in building Static and dynamic
 * Experience in writing java/spring boot applications in AWS and Kubernetes environment
 * security testing tools, container scanning pipelines, open-source software vulnerabilities
 * remediation pipelines, Kubernetes security
 * Experience in leading/mentoring other engineers to build a security or infrastructure
 * service from scratch
 * Experience identifying, testing, and remediating against vulnerabilities including those
 * found in the OWASP Top 10 and CWE/SANS Top 25, writing exploits and verification

## Description

The Security GRC Specialist will help advance Coupang's cybersecurity risk management capabilities, with a focus on continuous risk monitoring, data-driven risk assessment, and control governance. This role will develop scalable approaches to identify, quantify, and monitor cybersecurity risks using technical signals, control performance data, and real-time risk indicators. Working closely with AI GRC, Security Engineering, Control Assurance, and Security Architecture, this individual will help establish a unified risk management and control governance framework across AI and cybersecurity, translating complex technical risks into actionable insights and measurable risk reduction.

What You Will Do

 * Continuous Risk Methodologies: Develop and operationalize continuous cybersecurity risk management methodologies that move beyond periodic assessments toward ongoing, evidence-based risk visibility.
 * Data-Driven Modeling & Telemetry: Build and maintain data-driven risk models, indicators, and dashboards to identify emerging threats, systemic weaknesses, control gaps, and changes in residual risk.
 * Signal & Impact Correlation: Connect technical risk signals, control effectiveness data, and business impact to prioritize risks and inform risk treatment decisions.
 * Risk Governance & Registers: Establish and continuously improve cybersecurity risk assessment methodologies, risk registers, risk scoring algorithms, and risk acceptance governance.
 * Runtime & Automated Telemetry: Partner with Security and Engineering teams to identify opportunities for runtime risk monitoring, automated risk signals, and the integration of security telemetry into risk management workflows.
 * Unified AI & Cyber Alignment: Collaborate with AI GRC to develop common risk assessment methodologies, control governance principles, and reporting practices across AI and cybersecurity.
 * Assurance Integration: Partner with the Control Assurance team to incorporate assurance findings and control performance data into ongoing risk assessments and management reporting.
 * Systemic Remediation: Identify systemic risk patterns and recurring control weaknesses, providing actionable recommendations to improve the organization's overall risk posture.