Staff Technical Program Manager - Engineering Controls & Compliance

About this role

Please complete the attached Internal Transfer Request Form and submit.

Please make sure to apply with your Coupang e-mail address.

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar commerce industry from the ground up. We are an American technology company and one of the fastest-growing retail companies that has established an unparalleled reputation for being a leading and reliable force in global commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial, surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Role Overview

Coupang is seeking a highly technical and execution-focused Staff Technical Program Manager to lead Engineering Controls, Operational Governance, IT SOX Compliance, Security, Privacy and Technology Risk initiatives across Coupang's technology ecosystem.

This role sits at the intersection of software engineering, DevOps, cloud infrastructure, operational excellence, compliance, and AI-enabled governance. The primary focus is ownership of IT SOX Change Management controls and serving as a Second Line of Defense (2LOD) partner to engineering teams by independently assessing control effectiveness, monitoring software deployment activities, identifying compliance risks, and driving scalable engineering controls.

As Coupang continues to evolve its engineering platform, this role will help modernize compliance through automation, analytics, engineering telemetry, and AI-driven monitoring. The TPM will build a control environment that improves risk visibility, audit readiness, and operational excellence while minimizing compliance friction for engineering teams.

Unlike traditional audit or compliance roles, this position requires deep expertise in modern software development, CI/CD, release management, cloud-native architectures, deployment automation, and engineering operations. The ideal candidate is a former Software Engineer, Platform Engineer, DevOps Engineer, or SRE who has transitioned into technical program leadership and can effectively partner with engineers, architects, security leaders, auditors, and executives.

You will work closely with Engineering, Platform, Security, Privacy, Finance, Internal Audit, and Governance teams to strengthen controls, automate compliance processes, improve reliability, and enable rapid software delivery without compromising risk objectives.

What You Will Do

Lead Change Management Governance

• Own the strategy, governance framework, and roadmap for IT SOX Change Management controls across Coupang's software development lifecycle.

• Evaluate release processes, CI/CD pipelines, and production deployments to ensure compliance requirements are consistently met.

• Perform independent monitoring and oversight of deployment activities using engineering and compliance data.

• Identify compliance exceptions, unauthorized changes, control failures, and process gaps through continuous monitoring.

• Establish and improve controls related to:

• Code Reviews

• Release Approvals

• Segregation of Duties (SoD)

• Emergency Changes

• Production Deployments

• Change Monitoring and Reporting

• Leverage AI, analytics, and deployment telemetry to identify elevated-risk changes, anomalous deployment patterns, and control exceptions.

• Provide guidance to engineering teams and drive remediation of identified risks and control gaps.

• Balance engineering velocity with effective risk management through automation and scalable controls.

Drive CI/CD Governance & Engineering Controls

• Partner with Platform Engineering teams to embed preventive and detective controls directly into software delivery workflows.

• Improve governance across CI/CD, release management, deployment authorization, and production change processes.

• Define control observability frameworks that provide real-time visibility into software delivery controls.

• Partner with Platform and Data teams to develop automated monitoring capabilities that detect unauthorized changes, control bypasses, deployment anomalies, and emerging risks.

• Establish key control and risk indicators that proactively surface compliance concerns.

• Design monitoring and reporting solutions for:

• Release Compliance

• Deployment Risk

• Control Effectiveness

• SoD Violations

• Emergency Changes

• Change Failure Trends

• Develop metrics and dashboards that provide visibility into compliance, operational performance, and risk posture.

• Promote automation-first approaches to evidence generation, control testing, and compliance assurance.

Security, Privacy & Technology Risk

• Partner with Security, Privacy, and Risk organizations to align engineering controls with enterprise requirements and regulatory obligations.

• Support technology risk assessments, regulatory reviews, and remediation programs.

• Drive consistent implementation of security, privacy, and risk controls across engineering organizations.

• Promote secure-by-design and privacy-by-design principles within software delivery processes.

Lead Audit Readiness & Continuous Assurance

• Own evidence collection processes supporting SOX audits…