Staff Technical Program Manager

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar commerce industry from the ground up. We are an American technology company and one of the fastest-growing retail companies that has established an unparalleled reputation for being a leading and reliable force in global commerce. We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial, surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world. Role Overview Coupang is seeking a highly technical and execution-focused Staff Technical Program Manager to lead Engineering Controls, Operational Governance,

IT Sox

Compliance, Security, Privacy and Technology Risk initiatives across Coupang's technology ecosystem. This role sits at the intersection of software engineering, DevOps, cloud infrastructure, operational excellence, compliance, and AI-enabled governance. The primary focus is ownership of

IT Sox

Change Management controls and serving as a Second Line of Defense (2LOD) partner to engineering teams by independently assessing control effectiveness, monitoring software deployment activities, identifying compliance risks, and driving scalable engineering controls. As Coupang continues to evolve its engineering platform, this role will help modernize compliance through automation, analytics, engineering telemetry, and AI-driven monitoring. The TPM will build a control environment that improves risk visibility, audit readiness, and operational excellence while minimizing compliance friction for engineering teams. Unlike traditional audit or compliance roles, this position requires deep expertise in modern software development, CI/CD, release management, cloud-native architectures, deployment automation, and engineering operations. The ideal candidate is a former Software Engineer, Platform Engineer, DevOps Engineer, or SRE who has transitioned into technical program leadership and can effectively partner with engineers, architects, security leaders, auditors, and executives. You will work closely with Engineering, Platform, Security, Privacy, Finance, Internal Audit, and Governance teams to strengthen controls, automate compliance processes, improve reliability, and enable rapid software delivery without compromising risk objectives. What You Will Do Lead Change Management Governance

• Own the strategy, governance framework, and roadmap for

IT Sox

Change Management controls across Coupang's software development lifecycle.

• Evaluate release processes, CI/CD pipelines, and production deployments to ensure compliance requirements are consistently met.
• Perform independent monitoring and oversight of deployment activities using engineering and compliance data.
• Identify compliance exceptions, unauthorized changes, control failures, and process gaps through continuous monitoring.
• Establish and improve controls related to:
• Code Reviews
• Release Approvals
• Segregation of Duties (SoD)
• Emergency Changes
• Production Deployments
• Change Monitoring and Reporting
• Leverage AI, analytics, and deployment telemetry to identify elevated-risk changes, anomalous deployment patterns, and control exceptions.
• Provide guidance to engineering teams and drive remediation of identified risks and control gaps.
• Balance engineering velocity with effective risk management through automation and scalable controls. Drive CI/CD Governance & Engineering Controls
• Partner with Platform Engineering teams to embed preventive and detective controls directly into software delivery workflows.
• Improve governance across CI/CD, release management, deployment authorization, and production change processes.
• Define control observability frameworks that provide real-time visibility into software delivery controls.
• Partner with Platform and Data teams to develop automated monitoring capabilities that detect unauthorized changes, control bypasses, deployment anomalies, and emerging risks.
• Establish key control and risk indicators that proactively surface compliance concerns.
• Design monitoring and reporting solutions for:
• Release Compliance
• Deployment Risk
• Control Effectiveness
• SoD Violations
• Emergency Changes
• Change Failure Trends
• Develop metrics and dashboards that provide visibility into compliance, operational performance, and risk posture.
• Promote automation-first approaches to evidence generation, control testing, and compliance assurance. Security, Privacy & Technology Risk
• Partner with Security, Privacy, and Risk organizations to align engineering controls with enterprise requirements and regulatory obligations.
• Support technology risk assessments, regulatory reviews, and remediation programs.
• Drive consistent implementation of security, privacy, and risk controls across engineering organizations.
• Promote secure-by-design and privacy-by-design principles within software delivery processes. Lead Audit Readiness & Continuous Assurance
• Own evidence collection processes supporting SOX audits and compliance reviews.
• Establish automated and repeatable evidence collection mechanisms that improve audit readiness and reduce manual effort.
• Lead walkthroughs with Internal and External Audit teams.
• Serve as the primary technical SME during audit engagements.
• Validate the completeness and accuracy of audit evidence and management responses.
• Establish continuous assurance capabilities through automated monitoring and risk-based assessments.
• Drive timely resolution of audit findings, control deficiencies, and remediation actions. Basic Qualifications
• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related technical field.
• 10+ years of experience in Software Engineering, Technical Program Management, Platform Engineering, DevOps, SRE, or related technical leadership roles.
• 5+ years of experience leading large-scale cross-functional technical programs.
• Previous hands-on experience as a Software Engineer, Platform Engineer, Infrastructure Engineer, SRE, DevOps Engineer, or equivalent technical role.
• Experience operating in modern cloud-native software development environments.
• Experience supporting SOX, ITGC, Change Management, Security, Privacy, or Technology Risk programs.
• Experience partnering with engineering organizations responsible for enterprise-scale software delivery.
• Strong program management, stakeholder management, and executive communication skills. Preferred Qualifications
• Deep expertise in modern software engineering practices, including SDLC, CI/CD, release management, change management, and platform engineering.
• Strong experience with cloud-native architectures, Infrastructure as Code (IaC), site reliability engineering (SRE), and large-scale production operations.
• Hands-on experience with DevOps and deployment technologies such as GitHub Actions, Jenkins, ArgoCD, Spinnaker, Azure DevOps, Kubernetes, and Terraform.
• Proficiency in public cloud platforms, including AWS, Azure, or GCP.
• Experience leveraging data analytics, observability, and automation to improve engineering performanc