Company introduction
Coupang exists to deliver customer delight. When customers say "How did we live without Coupang?", we know we are fulfilling our mission. With the sole determination to make customers' shopping, dining and everyday lives easier, Coupang is leading innovation across the multi-hundred-million-dollar e-commerce industry. Coupang is one of the fastest-growing e-commerce companies and has built a unique position in the domestic commerce industry and customer trust. 

Coupang takes pride in being a global large listed company founded on start-up culture. This preserves the agility of its founding days and is our growth engine as we continuously launch new services and expand our business. Every Coupang employee has the opportunity to adopt an entrepreneurial spirit and drive new innovations and initiatives. The boldness to dive into work without hesitation and achieve results is the essence of how Coupang works. At Coupang, you will witness yourself, your colleagues, your team and the whole company growing every day. 

Every Coupang employee is committed to Coupang's mission of creating the future of commerce. We solve customers' problems, challenge conventional ideas and common wisdom, and go beyond what is considered achievable. If you want an amazing work experience in an always-on, high-tech and hyper-connected world, join Coupang today.

 

Job introduction

The InfoSec & TBA Compliance team is an organisation that independently checks and evaluates the obligation of value-added telecommunications service providers under the Telecommunications Business Act to secure service stability measures, and the establishment and implementation system of the Telecommunications Disaster Management Basic Plan under the Basic Act on Broadcasting and Communications Development, in order to provide users with a trustworthy and stable service. The Senior Principal, Compliance checks compliance with regulatory requirements and policies based on the Telecommunications Business Act and the Basic Act on Broadcasting and Communications Development, leads improvement verification, and performs the core role of minimising company-wide compliance risk and securing users' trust in the service.

 

Responsibilities

• Develop a medium- to long-term compliance monitoring strategy for service stability based on the Telecommunications Business Act and the Basic Act on Broadcasting and Communications Development
• Analyse related laws and policy requirements, and establish and enhance a monitoring framework
• Conduct regular and ad hoc checks and evaluations of compliance across the obligation to secure service stability measures and the implementation of the Telecommunications Disaster Management Basic Plan
• Request improvements for identified non-compliance and conduct post-verification of the adequacy and effectiveness of the corrective actions taken

 

Requirements

• At least 12 years of experience in information security compliance or IT audit and risk management at internet platforms, telecommunications operators or large online service companies
• Deep understanding of and practical experience with regulations such as the Telecommunications Business Act, the Basic Act on Broadcasting and Communications Development, the Information and Communications Network Act and the Protection of Communications Secrets Act, and experience designing and operating information security and regulatory compliance programmes
• A high level of technical understanding of cloud-based service environments (AWS, Azure, GCP), large-scale distributed systems, networks, databases and security architecture
• Leadership capability to communicate effectively with stakeholders across organisations and at executive level, and to exert influence
• Ability to analyse complex risks and propose strategic solutions, with experience writing executive reports and delivering executive-level presentations

 

Preferred qualifications

• Experience leading responses to domestic and foreign regulators, ISMS-P certification, and internal and external audits
• Understanding of and practical application experience with cloud-based global information security frameworks such as NIST, ISO 27001 and SOC
• Relevant professional certifications such as CISSP, CISA, CISM, ISO 27001 Lead Auditor or ISMS-P auditor
• Ability to write documents in English and collaborate with global stakeholders

 

Selection process and important information

• Selection process
  • Document screening - job fit interview - core competency interview - final offer
  • The selection process may differ by role and may change depending on schedule and circumstances.
  • Selection schedule and results will be notified individually to the email address registered on your application.
• Notes
  • This posting may close early once recruitment is complete.
  • If the application contains false information, the offer may be cancelled.
  • Employment-protected candidates (veterans, persons with disabilities, etc.) may receive preferential treatment in accordance with the relevant laws.
  • The job grade and scope of responsibilities may be adjusted considering the candidate's overall career and experience. If such a change is needed, the candidate will be contacted at an appropriate time before the final offer notification.
  • If the legally required qualifications for recruitment and performing the job are not met, recruitment may be restricted.
  • The employment type is permanent and includes a 12-week probationary period. However, where operationally necessary, the above probationary period may be waived, shortened or extended.

Privacy policy 

• The Coupang Group collects and processes your personal data in accordance with its Applicant Privacy Policy (link below). https://www.coupang.jobs/kr/privacy-policy/

Document return policy 

1. This notice is given pursuant to Article 11(6) of the Act on Fair Hiring Procedures.
2. Applicants who applied for a position with us and were not finally selected may request the return of the recruitment documents they submitted, in accordance with the Act on Fair Hiring Procedures. However, this does not apply to documents submitted via our website or by email, or documents voluntarily submitted without our request, and where recruitment documents are lost due to natural disasters or other causes not attributable to us, they are deemed returned.
3. Applicants requesting the return of documents under paragraph 2 above shall complete the request form for return of recruitment documents [Form No. 3 of the Enforcement Rules of the Act on Fair Hiring Procedures] and submit it by email ([contact details removed]). Documents will be sent by registered mail to the address specified within 14 days from the date submission is confirmed. In this case, the registered postage will be payable by the recipient, so please keep this in mind. 
4. In preparation for return requests under paragraph 2 above, we will keep the original recruitment documents submitted by applicants for 180 days from the date the hiring decision is confirmed. If return is not requested by then, all recruitment documents will be destroyed without delay in accordance with the Personal Information Protection Act.
5. However, paragraphs 1 to 4 above apply only where the labour laws of the Republic of Korea apply. They do not apply otherwise.