Role OverviewCoupang is seeking a highly technical and execution-focused Staff Technical Program Manager to lead Engineering Controls, Operational Governance, IT SOX Compliance, Security, Privacy and Technology Risk initiatives across Coupang's technology ecosystem.
This role sits at the intersection of software engineering, DevOps, cloud infrastructure, operational excellence, compliance, and AI-enabled governance. The primary focus is ownership of IT SOX Change Management controls and serving as a Second Line of Defense (2LOD) partner to engineering teams by independently assessing control effectiveness, monitoring software deployment activities, identifying compliance risks, and driving scalable engineering controls.
As Coupang continues to evolve its engineering platform, this role will help modernize compliance through automation, analytics, engineering telemetry, and AI-driven monitoring. The TPM will build a control environment that improves risk visibility, audit readiness, and operational excellence while minimizing compliance friction for engineering teams.
Unlike traditional audit or compliance roles, this position requires deep expertise in modern software development, CI/CD, release management, cloud-native architectures, deployment automation, and engineering operations. The ideal candidate is a former Software Engineer, Platform Engineer, DevOps Engineer, or SRE who has transitioned into technical program leadership and can effectively partner with engineers, architects, security leaders, auditors, and executives.
You will work closely with Engineering, Platform, Security, Privacy, Finance, Internal Audit, and Governance teams to strengthen controls, automate compliance processes, improve reliability, and enable rapid software delivery without compromising risk objectives.
What You Will DoLead Change Management Governance- Own the strategy, governance framework, and roadmap for IT SOX Change Management controls across Coupang's software development lifecycle.
- Evaluate release processes, CI/CD pipelines, and production deployments to ensure compliance requirements are consistently met.
- Perform independent monitoring and oversight of deployment activities using engineering and compliance data.
- Identify compliance exceptions, unauthorized changes, control failures, and process gaps through continuous monitoring.
- Establish and improve controls related to:
- Code Reviews
- Release Approvals
- Segregation of Duties (SoD)
- Emergency Changes
- Production Deployments
- Change Monitoring and Reporting
- Leverage AI, analytics, and deployment telemetry to identify elevated-risk changes, anomalous deployment patterns, and control exceptions.
- Provide guidance to engineering teams and drive remediation of identified risks and control gaps.
- Balance engineering velocity with effective risk management through automation and scalable controls.
Drive CI/CD Governance & Engineering Controls- Partner with Platform Engineering teams to embed preventive and detective controls directly into software delivery workflows.
- Improve governance across CI/CD, release management, deployment authorization, and production change processes.
- Define control observability frameworks that provide real-time visibility into software delivery controls.
- Partner with Platform and Data teams to develop automated monitoring capabilities that detect unauthorized changes, control bypasses, deployment anomalies, and emerging risks.
- Establish key control and risk indicators that proactively surface compliance concerns.
- Design monitoring and reporting solutions for:
- Release Compliance
- Deployment Risk
- Control Effectiveness
- SoD Violations
- Emergency Changes
- Change Failure Trends
- Develop metrics and dashboards that provide visibility into compliance, operational performance, and risk posture.
- Promote automation-first approaches to evidence generation, control testing, and compliance assurance.
Security, Privacy & Technology Risk- Partner with Security, Privacy, and Risk organizations to align engineering controls with enterprise requirements and regulatory obligations.
- Support technology risk assessments, regulatory reviews, and remediation programs.
- Drive consistent implementation of security, privacy, and risk controls across engineering organizations.
- Promote secure-by-design and privacy-by-design principles within software delivery processes.
Lead Audit Readiness & Continuous Assurance- Own evidence collection processes supporting SOX audits and compliance reviews.
- Establish automated and repeatable evidence collection mechanisms that improve audit readiness and reduce manual effort.
- Lead walkthroughs with Internal and External Audit teams.
- Serve as the primary technical SME during audit engagements.
- Validate the completeness and accuracy of audit evidence and management responses.
- Establish continuous assurance capabilities through automated monitoring and risk-based assessments.
- Drive timely resolution of audit findings, control deficiencies, and remediation actions.
Basic Qualifications- Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical field.
- 10+ years of experience in Software Engineering, Technical Program Management, Platform Engineering, DevOps, SRE, or related technical leadership roles.
- 5+ years of experience leading large-scale cross-functional technical programs.
- Previous hands-on experience as a Software Engineer, Platform Engineer, Infrastructure Engineer, SRE, DevOps Engineer, or equivalent technical role.
- Experience operating in modern cloud-native software development environments.
- Experience supporting SOX, ITGC, Change Management, Security, Privacy, or Technology Risk programs.
- Experience partnering with engineering organizations responsible for enterprise-scale software delivery.
- Strong program management, stakeholder management, and executive communication skills.
Preferred Qualifications- Deep expertise in modern software engineering practices, including SDLC, CI/CD, release management, change management, and platform engineering.
- Strong experience with cloud-native architectures, Infrastructure as Code (IaC), site reliability engineering (SRE), and large-scale production operations.
- Hands-on experience with DevOps and deployment technologies such as GitHub Actions, Jenkins, ArgoCD, Spinnaker, Azure DevOps, Kubernetes, and Terraform.
- Proficiency in public cloud platforms, including AWS, Azure, or GCP.
- Experience leveraging data analytics, observability, and automation to improve engineering performance, operational excellence, and risk visibility.
- Demonstrated ability to design and implement AI-enabled compliance solutions, including continuous control monitoring, automated evidence collection, and risk analysis.
- Working knowledge of SOX, ITGCs, change and access management controls, segregation of duties (SoD), and industry frameworks such as COBIT, COSO, NIST, and ISO 27001.
- Professional certifications such as CISA, CISSP, CRISC, CIA, PMP, or cloud platform certifications are highly desirable.
Pay & BenefitsOur compensation reflects the cost of labor across several US geographic markets. At Coupang, your base pay is one part of your total compensation. The base pay for this position ranges from $155,000/year in our lowest geographic market to $267,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience.
General Description of All Benefits- Annual bonus is 0-20% of the base salary
- Medical/Dental/Vision/Life, AD&D insurance
- Flexible Spending Accounts (FSA) & Health Savings Account (HSA)
- Long-term/Short-term Disability
- Employee Assistance Program (EAP) program
- 401K Plan with Company Match
- 18-21 days of the Paid Time Off (PTO) a year based on the tenure
- 12 Public Holidays
- Paid Parental leave
- Pre-tax commuter benefits
General Description of Other Compensation"Other Compensation" includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary range or wage scale.
Recruitment Process- Application Review - Job Fit Interview - Focus Interview - Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage
Details to Consider- This job posting may be closed prior to the stated end date for application if all openings are filled.
- Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection (recipients of veteran's benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.
Privacy Notice- Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/
Job Requisition ID 
