Staff Security Engineer (AI GRC)

Coupang•Mountain View, CA

About The Position

Coupang is seeking a Staff AI Security Governance Engineer to join its AI Governance, Risk Management, and Compliance team. This technical governance strategist will bridge AI regulatory requirements and technical security architecture by defining and architecting the enterprise AI risk framework, translating regulatory mandates into policy-as-code specifications, and establishing technical guardrails for AI development. The role partners with AI/ML engineers, security architects, Legal, and Privacy teams to set standards, and works with the Control Assurance team to support execution and continuous monitoring. The role designs and maintains Coupang’s AI Security and Risk Management Framework, mapped to NIST AI RMF, ISO 42001, MSIT guidelines, and global AI Acts. It architects policy-as-code rule sets and security baselines for AI pipelines; defines technical control criteria and validation logic for assurance execution, monitoring, and audit; and establishes safeguards for AI-specific threats across internal and third-party AI SaaS and LLM deployments. It also embeds governance requirements in AI architectures, CI/CD workflows, and runtime environments, and owns the enterprise AI policy lifecycle, including decision frameworks for model adoption, data privacy, and cross-border data transfers.

Requirements

Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related technical or policy field.
10 or more years of experience in Information Security, Technical GRC, Security Architecture, or AI/Cloud Governance.
Deep understanding of AI/ML security risks, AWS cloud security architecture, and privacy/data protection principles.
Technical literacy to evaluate system architecture diagrams, interpret API/data flow models, and translate policy requirements into technical specifications for engineering and assurance teams.
Proven track record architecting governance frameworks such as NIST AI RMF, ISO 42001, NIST CSF, and PIPA in technology-driven environments.
Excellent written and verbal communication skills in English.

Nice To Haves

Experience defining policy-as-code specifications, continuous control monitoring logic, or automated compliance guardrails in cloud environments.
Hands-on familiarity with AI/ML pipelines, LLM integration architectures, data tokenization techniques, or cloud control planes.
Experience partnering with operational audit/assurance teams to operationalize GRC metrics and controls.
Relevant industry certifications, such as CISM, CRISC, CISSP, or specialized AI security/governance credentials.

Responsibilities

Design and maintain Coupang’s AI Security and Risk Management Framework, mapping it to NIST AI RMF, ISO 42001, MSIT guidelines, and global AI Acts.
Architect policy-as-code rule sets and security baseline specifications for deployment across AI pipelines.
Define technical control criteria and validation logic for the Control Assurance team to execute, monitor, and audit.
Identify, assess, and establish mitigation standards for AI threats, including prompt injection, training data leakage, model extraction, shadow AI, and supply chain vulnerabilities, across internal and third-party AI SaaS/LLM deployments.
Partner with AI platform teams, infrastructure engineers, and security architects to embed governance and security requirements into AI architectures, CI/CD workflows, and runtime environments.
Own the enterprise AI policy lifecycle, establishing decision frameworks for AI model adoption, data privacy guardrails, and cross-border data transfer requirements.