Staff Technical Program Manager - Engineering Controls & Compliance

Description

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar commerce industry from the ground up. We are an American technology company and one of the fastest-growing retail companies that has established an unparalleled reputation for being a leading and reliable force in global commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial, surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Role Overview

Coupang is seeking a highly technical and execution-focused Staff Technical Program Manager to lead Engineering Controls, Operational Governance, IT SOX Compliance, Security, Privacy and Technology Risk initiatives across Coupang's technology ecosystem.

This role sits at the intersection of software engineering, DevOps, cloud infrastructure, operational excellence, compliance, and AI-enabled governance. The primary focus is ownership of IT SOX Change Management controls and serving as a Second Line of Defense (2LOD) partner to engineering teams by independently assessing control effectiveness, monitoring software deployment activities, identifying compliance risks, and driving scalable engineering controls.

As Coupang continues to evolve its engineering platform, this role will help modernize compliance through automation, analytics, engineering telemetry, and AI-driven monitoring. The TPM will build a control environment that improves risk visibility, audit readiness, and operational excellence while minimizing compliance friction for engineering teams.

Unlike traditional audit or compliance roles, this position requires deep expertise in modern software development, CI/CD, release management, cloud-native architectures, deployment automation, and engineering operations. The ideal candidate is a former Software Engineer, Platform Engineer, DevOps Engineer, or SRE who has transitioned into technical program leadership and can effectively partner with engineers, architects, security leaders, auditors, and executives.

You will work closely with Engineering, Platform, Security, Privacy, Finance, Internal Audit, and Governance teams to strengthen controls, automate compliance processes, improve reliability, and enable rapid software delivery without compromising risk objectives.

What You Will Do

Lead Change Management Governance

• Own the strategy, governance framework, and roadmap for IT SOX Change Management controls across Coupang's software development lifecycle.
• Evaluate release processes, CI/CD pipelines, and production deployments to ensure compliance requirements are consistently met.
• Perform independent monitoring and oversight of deployment activities using engineering and compliance data.
• Identify compliance exceptions, unauthorized changes, control failures, and process gaps through continuous monitoring.
• Establish and improve controls related to:
• Code Reviews
• Release Approvals
• Segregation of Duties (SoD)
• Emergency Changes
• Production Deployments
• Change Monitoring and Reporting
• Leverage AI, analytics, and deployment telemetry to identify elevated-risk changes, anomalous deployment patterns, and control exceptions.
• Provide guidance to engineering teams and drive remediation of identified risks and control gaps.
• Balance engineering velocity with effective risk management through automation and scalable controls.

Drive CI/CD Governance & Engineering Controls

• Partner with Platform Engineering teams to embed preventive and detective controls directly into software delivery workflows.
• Improve governance across CI/CD, release management, deployment authorization, and production change processes.
• Define control observability frameworks that provide real-time visibility into software delivery controls.
• Partner with Platform and Data teams to develop automated monitoring capabilities that detect unauthorized changes, control bypasses, deployment anomalies, and emerging risks.
• Establish key control and risk indicators that proactively surface compliance concerns.
• Design monitoring and reporting solutions for:
• Release Compliance
• Deployment Risk
• Control Effectiveness
• SoD Violations
• Emergency Changes
• Change Failure Trends
• Develop metrics and dashboards that provide visibility into compliance, operational performance, and risk posture.
• Promote automation-first approaches to evidence generation, control testing, and compliance assurance.

Security, Privacy & Technology Risk

• Partner with Security, Privacy, and Risk organizations to align engineering controls with enterprise requirements and regulatory obligations.
• Support technology risk assessments, regulatory reviews, and remediation programs.
• Drive consistent implementation of security, privacy, and risk controls across engineering organizations.
• Promote secure-by-design and privacy-by-design principles within software delivery processes.

Lead Audit Readiness & Continuous Assurance

• Own evidence collection processes supporting SOX audits and compliance reviews.
• Establish automated and repeatable evidence collection mechanisms that improve audit readiness and reduce manual effort.
• Lead walkthroughs with Internal and External Audit teams.
• Serve as the primary technical SME during audit engagements.
• Validate the completeness and accuracy of audit evidence and management responses.
• Establish continuous assurance capabilities through automated monitoring and risk-based assessments.
• Drive timely resolution of audit findings, control deficiencies, and remediation actions.

Basic Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical field.
• 10+ years of experience in Software Engineering, Technical Program Management, Platform Engineering, DevOps, SRE, or related technical leadership roles.
• 5+ years of experience leading large-scale cross-functional technical programs.
• Previous hands-on experience as a Software Engineer, Platform Engineer, Infrastructure Engineer, SRE, DevOps Engineer, or equivalent technical role.
• Experience operating in modern cloud-native software development environments.
• Experience supporting SOX, ITGC, Change Management, Security, Privacy, or Technology Risk programs.
• Experience partnering with engineering organizations responsible for enterprise-scale software delivery.
• Strong program management, stakeholder management, and executive communication skills.

Preferred Qualifications

• Deep expertise in modern software engineering practices, including SDLC, CI/CD, release management, change management, and platform engineering.
• Strong experience with cloud-native architectures, Infrastructure as Code (IaC), site reliability engineering (SRE), and large-scale production operations.
• Hands-on experience with DevOps and deployment technologies such as GitHub Actions, Jenkins, ArgoCD, Spinnaker, Azure DevOps, Kubernetes, and Terraform.
• Proficiency in public cloud platforms, including AWS, Azure, or GCP.
• Experience leveraging data analytics, observability, and automation to improve engineering performance, operational excellence, and risk visibility.
• Demonstrated ability to design and implement AI-enabled compliance solutions, including continuous control monitoring, automated evidence collection, and risk analysis.
• Working knowledge of SOX, ITGCs, change and access management controls, segregation of duties (SoD), and industry frameworks such as COBIT, COSO, NIST, and ISO 27001.
• Professional certifications such as CISA, CISSP, CRISC, CIA, PMP, or cloud platform certifications are highly desirable.

Pay & Benefits

Our compensation reflects the cost of labor across several US geographic markets. At Coupang, your base pay is one part of your total compensation. The base pay for this position ranges from $155,000/year in our lowest geographic market to $267,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience.

General Description of All Benefits

• Annual bonus is 0-20% of the base salary
• Medical/Dental/Vision/Life, AD&D insurance
• Flexible Spending Accounts (FSA) & Health Savings Account (HSA)
• Long-term/Short-term Disability
• Employee Assistance Program (EAP) program
• 401K Plan with Company Match
• 18-21 days of the Paid Time Off (PTO) a year based on the tenure
• 12 Public Holidays
• Paid Parental leave
• Pre-tax commuter benefits

General Description of Other Compensation

“Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary range or wage scale.

Recruitment Process

• Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
• The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
• Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage

Details to Consider

• This job posting may be closed prior to the stated end date for application if all openings are filled.
• Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
• Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.

Privacy Notice

• Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below:

Coupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to actual or perceived race (including traits historically associated with race, including but not limited to hair texture and protective hair styles), color, religion, religious creed (including religious dress and grooming practices), sex or gender (including pregnancy, childbirth, breastfeeding, and medical conditions related to pregnancy, childbirth or breastfeeding), gender identity, gender expression, sexual orientation, ,ancestry, national origin (including language use restrictions), age (40 and over), physical or mental disability, medical condition, genetic information, HIV/AIDS or Hepatitis C status, family status (including but not limited to marital or domestic partnership status), military or veteran status, use of a trained dog guide or service animal, political activities or affiliations, ancestry, citizenship, family and medical leave status, status as a victim of any violent crime, or any other characteristic or class protected by the laws or regulations in the locations where we operate. Coupang is also committed to providing a safe work environment for its employees and its consumers. If you need assistance and/or a reasonable accommodation in the application of recruiting process due to a disability, please contact us at View email address on coupang.jobs

Job Requisition ID : R0073013