Staff Security Engineer (AI GRC)
About The Position
Coupang is seeking a Staff AI Security Governance Engineer for its AI Governance, Risk Management, and Compliance (AI GRC) team. This technical governance strategist bridges AI regulatory requirements and technical security architecture. The role defines and architects the enterprise AI risk framework, translates regulatory requirements into policy-as-code specifications, and establishes technical guardrails for AI development. It partners with AI/ML engineers, security architects, Legal, Privacy, and the Control Assurance team to set standards and support execution and continuous monitoring. The position designs and maintains Coupang’s AI Security and Risk Management Framework mapped to NIST AI RMF, ISO 42001, MSIT guidelines, and global AI Acts. It establishes policy-as-code rules and security baselines for AI pipelines; defines technical control criteria and validation logic; assesses AI-specific threats; integrates requirements into AI architectures, CI/CD workflows, and runtime environments; and owns the enterprise AI policy lifecycle, including model adoption decision frameworks, data privacy guardrails, and cross-border data transfer requirements.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Software Engineering, or a related technical or policy field.
- 10 or more years of experience in Information Security, Technical GRC, Security Architecture, or AI/Cloud Governance.
- Deep understanding of AI/ML security risks, AWS cloud security architecture, and privacy and data protection principles.
- Technical literacy to evaluate system architecture diagrams, interpret API and data flow models, and translate policy requirements into technical specifications for engineering and assurance teams.
- Proven track record architecting governance frameworks such as NIST AI RMF, ISO 42001, NIST CSF, and PIPA in technology-driven environments.
- Excellent written and verbal communication skills in English.
Nice To Haves
- Experience defining policy-as-code specifications, continuous control monitoring logic, or automated compliance guardrails in cloud environments.
- Hands-on familiarity with AI/ML pipelines, LLM integration architectures, data tokenization techniques, or cloud control planes.
- Experience partnering with operational audit or assurance teams to operationalize GRC metrics and controls.
- Relevant industry certifications such as CISM, CRISC, CISSP, or specialized AI security/governance credentials.
Responsibilities
- Design and maintain Coupang’s AI Security and Risk Management Framework, mapped to NIST AI RMF, ISO 42001, MSIT guidelines, and global AI Acts.
- Architect policy-as-code rule sets and security baseline specifications for deployment across AI pipelines.
- Define technical control criteria and validation logic for the Control Assurance team to execute, monitor, and audit.
- Identify and assess AI-specific threat vectors and establish mitigation standards across internal and third-party AI SaaS and LLM deployments.
- Partner with AI platform teams, infrastructure engineers, and security architects to embed governance and security requirements into AI architectures, CI/CD workflows, and runtime environments.
- Own the enterprise AI policy lifecycle, including decision frameworks for AI model adoption, data privacy guardrails, and cross-border data transfer requirements.
Benefits
- Medical, dental, vision, and life insurance; AD&D insurance.
- Flexible Spending Accounts (FSA) and Health Savings Account (HSA).
- Long-term and short-term disability coverage.
- Employee Assistance Program (EAP).
- 401(k) plan with company match.
- 18–21 days of paid time off per year, based on tenure.
- 12 public holidays.
- Paid parental leave.
- Pre-tax commuter benefits.
- Free electric car charging station.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
