SingleStore

Position Description
SingleStore is a cutting edge business leading a wave of disruption in the database space focused on delivering a single platform for all data intensive applications. We believe in building secure by design solutions for cloud and on-premises deployments without compromising performance. 
At SingleStore compliance with industry standards and regulations is a top priority that involves all business units. To meet the needs of our rapidly growing business we are seeking an experienced and highly motivated GRC Program Manager to help us ensure our operations, products and services meet customer and industry security and compliance requirements.
As the Governance, Risk and Compliance Program Manager your main objective will be to maintain current and pursue new Information Security and Data Protection certifications, manage risk across the company within that same scope, uphold and enforce compliance against policies, procedures and processes, making sure SingleStore upholds regulatory and legal compliance and that internal staff adheres to established rules and guidelines. 
Job Responsibilities
<ul>
<li>Overall governance efforts related to security program management, including maintaining the Information Security Management System documentation and audit trail, updating and issuing policies.</li>
<li>Maintaining our active security certifications (ISO/IEC 27001, SOC 2 Type II) and making sure other departments/teams collaborate to achieve that goal, including delegating tasks needed for compliance purposes to Corporate IT Security, Application Security or Cloud Security depending on the scope of the tasks at hand</li>
<li>Org-wide risk management (includes setting the methodology, risk assessment and defining a risk treatment plan company-wide)</li>
<li>Setting Information Security plans to achieve our ISO 27001 Information Security Management System objectives, including but not limited to, data breach prevention, providing timely breach/incident notifications, annual information security awareness training, vendor risk assessments, currency of business continuity &amp; incident response plans, phishing simulations, and internal audit of all relevant controls.  </li>
<li>Issuing Information Security comms internally</li>
<li>Vendor risk and security management (includes owning and managing the company security profile)</li>
<li>Consulting with Corporate IT on Security &amp; Compliance Awareness training (delegating to other teams where needed)</li>
<li>Laying out the requirements for Business Continuity that need to be developed and implemented by respective departments</li>
<li>Defining corrective action plans and following up on non-conformities and their respective owners</li>
<li>Liaising with the Information Security committee/executive team</li>
<li>Liaising and collaborating with Legal to maintain legal/regulatory compliance (HIPAA, GDPR, CCPA). Note that the compliance manager will not own legal/regulatory compliance responsibility but rather support Legal.</li>
</ul>
Basic Qualifications
<ul>
<li>3+ years experience in GRC.</li>
<li>2+ years experience working with an Independent Software Vendor.</li>
<li>Strong understanding of security standards and applicable regulations (e.g., ISO 27001, SOC 2 Type 2)</li>
<li>Experience working with compliance frameworks and risk management processes.</li>
<li>Understanding of cloud technologies.</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience in performing GRC functions for managed cloud services.</li>
<li>Certifications in one or more of the following areas: CISSP, CISA, CISM.</li>
<li>Bachelors in Computer Science or Information Systems.</li>
<li>Experience presenting and communicating GRC content to both technical and management audiences. </li>
<li>Demonstrated leadership skills with experience working effectively with engineering, sales, marketing, product management, IT and legal.</li>
<li>Familiarity with data security frameworks and regulatory standards, including PCI DSS, GDPR and/or CCPA/CPRA, and FedRAMP.</li>
</ul>
Benefits
<ul>
<li>Company Wide</li>
<ul>
<li>Technology Stipend for New Employees </li>
<li>Monthly Cell Phone and Internet Stipend</li>
<li>Health and Wellness benefit </li>
<li>Company and team events </li>
<li>Flexible time off </li>
<li>Volunteer time off</li>
<li>Stock Options </li>
</ul>
</ul>
As employees are located in many different countries around the world, some benefits may differ from country to country. In all cases, we do our best to provide equitable perks and benefits across our locations.
Other:
<ul>
<li>Full Time Employment </li>
<li>Eligibility to work for an India based employer</li>
<li>Fully Remote Role or Hybrid based in India - Hyderabad or Bangalore.</li>
</ul>

SingleStore is one platform for all data, built so you can engage with insight in every moment. Trusted by industry leaders, SingleStore enables enterprises to adapt to change as it happens, embrace diverse data with ease, and accelerate the pace of innovation. SingleStore is venture-backed and headquartered in San Francisco with offices in Sunnyvale, Seattle, Boston, London, Lisbon, Bangalore, Dublin and Kyiv. Defining the future starts with The Single Database for All Data-Intensive Applications.
Consistent with our commitment to diversity &amp; inclusion, we value individuals with the ability to work on diverse teams and with a diverse range of people.

To all recruitment agencies: SingleStore does not accept agency resumes. Please do not forward resumes to SingleStore employees. SingleStore is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.

Hyderabad

Program Manager - Governance, Risk and Compliance (GRC)

Justworks, Inc.

Who We Are
At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.
We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you.
We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.
<a href="https://justworks.com/careers" rel="noopener noreferrer nofollow ugc" target="_blank">Our Values</a>
If this sounds like you, you’ll fit right in.Who You Are
Justworks Digital Security (JDS) team is responsible for the security of Justworks products, platforms, services, and corporate operations. Led by the Chief Information Security Officer, JDS’s vision is to become the partner and enabler for business and engineering by working collaboratively with others to embed security in business hygiene and engineering DNA to strengthen our cyber resilience. We are very excited to expand the JDS team with our search for an experienced and motivated security leader to join the team to lead and manage the Security Governance, Risk, and Compliance (GRC) function. 
This Senior Manager, GRC role will provide expert leadership in all matters pertaining to governance, risk management, and compliance, ensuring security programs are successfully executed to protect Justworks customers and strengthen cyber resilience for Justworks. This role will be responsible for providing a risk management framework and process, governance oversight, and ensuring compliance with Justworks policies/standards and regulations. This Sr. Manager will report to the VP, Chief Information Security Officer (CISO).
Your Success Profile
<h3>What You Will Work On </h3>
<ul>
<li>Work with the Chief Information Security Officer (CISO) and other leaders to create and manage enterprise-wide security governance and risk management program, and ensure Digital Security practices align with business objectives, digital security vision, and evolving threat landscape challenges.</li>
<li>Design and drive the digital security and integrated risk management strategy, framework, tools, and processes.</li>
<li>Responsible for strategizing, managing, resource planning and hiring, measuring (SLAs, OKRs), partner development, and other aspects of running GRC as a service. ‍</li>
<li>Introduce the necessary GRC tools or platforms to define, simplify, and automate the risk management processes, and enhance Incident Management and Vulnerability Management.</li>
<li>Oversee, maintain, and track Justwork’s Security Risk Registry.</li>
<li>Redefine and develop a robust set of security policies and standards applicable to Justworks agile development, zero-trust environment, and emerging threat landscapes.</li>
<li>Enhance the Security Compliance Program to ensure regulatory compliance, especially with business growth and scope changes, and to mature the program in the future to measure internal compliance against our new policies and standards.</li>
<li>Build a cross-functional security governance model and effectively run various governance committees to ensure stakeholders align on the risk acceptance level, and priorities to manage risks.</li>
<li>Establish a solid third-party risk management program and ensure security risks are addressed from evaluation of the vendors/suppliers and contracts negotiation to ongoing assessment of vendors/suppliers' security posture. </li>
<li>Set the direction and mature the security awareness and training program. Establish an ongoing awareness and training program to educate all Justworkers on doing the right things for Justworks. </li>
<li>Work with the CISO to define security metrics and develop GRC dashboard. Continuously and routinely measure and report the effectiveness of the security programs, overall security resilience risk posture improvement, and maturity growth.</li>
<li>Work closely with Legal, Internal Audit, and external entities as needed to support Enterprise Risk Management.</li>
</ul>
<h3>How You Will Do Your Work</h3>
As a Senior Manager, GRC, , how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
<ul>
<li>Clear communication - the ability to articulate thoughts and express ideas effectively using oral, written, visual and non-verbal communication skills, as well as listening skills to gain understanding.</li>
<li>Ethical practice - the ability to integrate core values, integrity and accountability throughout all organizational and business practices.</li>
<li>Detail-oriented - exercises extreme attention to detail; is thorough, accurate, organized, and productive and seeks to understand both the cause and effect of a situation.</li>
<li>Risk assessment - applying a logical step-by-step process to protect, and consequently minimize risks to, the organization, interests and employees.</li>
<li>Manages complexity - making sense of complex, high quantity, and sometimes contradictory information to effectively solve problems.</li>
</ul>
In addition, all Justworkers focus on aligning their behaviors to our core values known as COGIS. It stands for:
<ul>
<li>Camaraderie - Day to day you can be seen working together toward a higher purpose. You like to have fun. You’re an active listener, treat people respectfully, and have a strong desire to know and help others.</li>
<li>Openness - Your default is to be open. You're willing to share information, understand other perspectives, and consider new possibilities. You’re curious, ask open questions, and are receptive to thoughts and feedback from others.</li>
<li>Grit - You demonstrate grit by having the courage to commit and persevere. You’re committed, earnest, and dive in to get the job done well with a positive attitude.</li>
<li>Integrity - Simply put, do what you say and say what you'll do. You’re honest and forthright, have a strong moral compass, and strive to match your words with your actions while leading by example. </li>
<li>Simplicity - Be like Einstein: “Everything should be made as simple as possible, but no simpler.”</li>
</ul>
<h3>Qualifications</h3>
<ul>
<li>Minimum of 10 years of cyber security experience, with a combined background of technology and compliance, preferred.</li>
<li>Minimum of 5 years in a leadership position, with experience managing any Security Governance, Risks, and Compliance (GRC) functions or Internal Audit function.</li>
<li>Minimum of 5 years experience in GRC, familiar with SOC2, SOX or PCI compliance.</li>
<li>Extensive experience in risk management, vendor and client security management.</li>
<li>CISSP and CISM certifications and/or advanced degree in Systems Assurance or Information Systems, a plus.</li>
<li>Familiarity with cyber security frameworks and risk management frameworks, with experience in implementing and applying frameworks into actionable tasks.</li>
<li>Experience with tech company and cloud is required. Experiences with other industry such as HR, health &amp; insurance is preferred</li>
<li>Security experience in digital operations working with the business to redesign ways of working and re-engineering process infrastructure to activate operational agility, efficiency, and business growth while maintaining security.</li>
<li>Strong communication and presentation skills. Ability to present complex compliance issues in an easy-to-understand manner for executive management.</li>
<li>Ability to communicate clearly and effectively with both technology/development and business partners.</li>
<li>Strong relationship, team building, and facilitation skills.</li>
<li>Experience working in a complex matrix organization, as the security advisory team supports operational and transformational efforts for business verticals while driving a specific security objective.</li>
<li>Solid and demonstrable comprehension of cyber security including malware, threats, attacks, incidents, and vulnerability management.</li>
<li>Experience in a fast-paced and occasionally, high-stress environment.</li>
<li>Ability to think strategically; work with a sense of urgency and pay attention to detail.</li>
<li>Strong team player that collaborates well with others to solve problems and actively incorporates input from various sources.</li>
<li>A reliable and trustworthy leader with outstanding work ethic.</li>
<li>Independent and creative thinker with the willingness to "step outside the box" and take reasonable, calculated risks.</li>
</ul><h4>Please Note: In accordance with New York City public health requirements, and because this position requires onsite work, this position will require the successful candidate to show proof of vaccination against COVID-19.  As an equal opportunity employer, Justworks will provide reasonable accommodation to those individuals who are unable to be vaccinated consistent with federal, state, and local law.</h4>
Diversity At Justworks
Justworks is committed to maintaining a workplace where diversity of identity, culture, and life experience is the norm and is celebrated authentically and respected consistently. Diversity in our work, our people, and our product drives creativity and innovation, entrepreneurial leadership and integrity, competitiveness, and collaboration throughout our business and in the market. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our customers.
We’re proud to be an equal opportunity employer open to all qualified applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, veteran status, or any other legally protected status. 
<a href="https://justworks.com/blog/black-lives-matter-90-days-later" rel="noopener noreferrer nofollow ugc" target="_blank">Our DEI Commitment</a>

New York

Senior Manager, Governance, Risk &amp; Compliance

Palantir Technologies

A World-Changing Company At Palantir, we’re passionate about building software that solves problems. We partner with the most important institutions in the world to transform how they use data and technology. Our software has been used to stop terrorist attacks, discover new medicines, gain an edge in global financial markets, and more. If these types of projects excite you, we'd love for you to join us.The RoleAs a member of Palantir's Technical Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with engineers, security, clients, and auditors to navigate and manage compliance frameworks (e.g., ISO/SOC/NIST) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly &amp; efficiently while also maintaining our current compliance obligations. We are looking for a technically experienced and innovative security, compliance, and audit professional that understands IT processes, has strong communications skills, and can manage complex cross organizational projects. 
<h3>Core Responsibilities</h3>
<ul>
<li>Support internal and external security assessments of new and existing Palantir services and infrastructure including operational, regulatory, and contractual requirements (e.g. SOC 2, ISO 27001, ISO 9001). </li><li>Develop and maintain a technical understanding of Palantir’s control implementations and articulate these to various audiences, including internal and external auditors. </li><li>Partner with engineers and various internal teams to interpret and map compliance requirements to controls implementations. </li><li>Improve and automate controls and documentation for internal systems, processes, and policies. </li><li>Guide technical and operational decision-making towards future product offerings and efficient organizational processes.</li></ul>
<h3>What We Value</h3>
<ul>
<li>2+ years of experience performing and running audits, certification programs or control assessments.</li><li>Big 4 experience or compliance risk advisory experience preferred.</li><li>CISA, CIA, CISSP or other related certifications a plus.</li><li>Strong knowledge of and experience in security risk management and with frameworks including related regulatory compliance requirements (e.g. SOC 1/2, ISO 27001, PCI, HITRUST) required.</li><li>Experience assessing security, compliance, and privacy controls across a variety of technical and organizational environments. </li><li>Familiarity with distributed applications on cloud infrastructure and a broad range of technical concepts relevant to cloud computing environments including logical access controls, agile development, information security, network security, privacy, etc.</li><li>Ability to clearly communicate compliance requirements to engineering teams and the ability to interpret technical implementations and communicate them to to external auditors.</li><li>Comfortable planning, executing, and delivering on multiple long-term projects with external dependencies in tandem.</li></ul>Palantir is committed to promoting a culture of diversity, equity, and inclusion and is proud to be an Equal Employment Opportunity and Affirmative Action employer. We believe that all Palantirians share the responsibility of upholding our commitment to these values and encourage candidates from a wide range of backgrounds, perspectives, and lived experiences to join us in solving the world’s hardest problems. Palantir does not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Palantir is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. Please see the United States Department of Labor’s <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO poster</a> and <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO poster supplement</a> for additional information.Palantir is committed to making the job application process accessible to everyone. If you are living with a disability (visible or not visible) and need to request a reasonable accommodation for any part of the application or hiring process, please <a href="mailto:accommodations@palantir.com" rel="noopener noreferrer nofollow ugc" target="_blank">reach out</a> and let us know how we can help.

Risk and Compliance Analyst

Smartsheet

Cyber Security is an integral part of Smartsheet’s corporate culture. At Smartsheet, we believe that it is the responsibility of each and every employee to safeguard information, protect it from unauthorized access, and ensure regulatory compliance. Cyber Security has a significant effect on privacy, consumer trust, external reputation, and it is a priority on every team's agenda.
In this critical role, you will be responsible for SecOps capability that detects and responds to a variety of security incidents on a global scale. You will perform the hands-on role of a security analyst and have the opportunity to enhance the overall security incident response experience of the organization. 
In 2005, Smartsheet was founded on the idea that teams and millions of people worldwide deserve a better way to deliver their very best work. Today, we deliver a leading cloud-based platform for work execution, empowering organizations to plan, capture, track, automate, and report on work at scale, resulting in more efficient processes and better business outcomes.
You will be based in our San Jose, Costa Rica office and report to the Senior Manager, Security Engineering. 
You Will:
<ul>
<li>Manage Identification, prioritization, and remediation of security incidents.</li>
<li>Be part of the security incident response team responsible for planning, design, implementation, attack mitigation and ongoing support of security events and incidents of high complexity to fulfill the business needs.</li>
<li>Perform hands-on investigation of complex security incidents with the help of subject matter experts from different business units to protect organization.</li>
<li>Provide technical deep understanding of managing and coordinating security incidents, conducting lessons learned (PIR), mitigating cyber risks and improving security controls.</li>
<li>Work with all interfacing teams to define and baseline the security incident detection and response while meeting established SLAs.</li>
<li>Coordinate among SecOps analysts, other security experts and managed service providers in support of global security incident response activities.</li>
<li>Provide direction in the innovation of bleeding-edge security technologies and utilizing a risk-based approach to properly test and introduce them into the overall environment.</li>
<li>Be passionate in the pursuit of securing Smartsheet’s data and critical assets.</li>
<li>Effectively manage cross-functional internal and external team collaboration, and communications.</li>
<li>Respond to and assist with due diligence and internal / external security audit requests.</li>
<li>Identify opportunities for further enhancements and refinements to security standards and processes.</li>
<li>Manage customer and internal stakeholder communications during security incidents.</li>
<li>Coordinating people and processes during troubleshooting and corrective activities.</li>
<li>Assessing and confirming customer impact during security incidents.</li>
<li>Addressing questions and concerns from internal and external stakeholders.</li>
<li>Maintaining security incident timeline while working with managed service providers.</li>
<li>Be part of rotational on-call support.</li>
</ul>
You Have:
<ul>
<li>Bachelor’s degree in engineering, computer science, information security, or information systems from Tier-I University / College or equivalent experience.</li>
<li>Strong experience in SaaS, AWS, GCP and Azure cloud security.</li>
<li>Must have at least 5+ years of total experience in the field of cyber security and specifically in SecOps.</li>
<li>At least 5+ years of experience in security incident response or security analyst role, which includes collaboration with security experts, managing detection and response goals.</li>
<li>Experience working on major security incidents while working with various security vendors and internal stakeholders.</li>
<li>Prior experience in implementing and or supporting 24x7 operations.</li>
<li>Ability to handle multiple competing priorities in a fast-paced environment.</li>
<li>Experience demonstrating strong technical IR acumen, self-motivation and accountability.</li>
<li>Experience on leading complex security incidents cross-functionally and globally.</li>
<li>Excellent communication skills and Excellent team player.</li>
<li>Experienced in NIST framework and MITRE attack framework.</li>
<li>Relevant certification such as CISSP, SANS GPEN, SANS GXPN, SANS GIAC, SANS GREM, Splunk Certification etc.</li>
<li>OSCP (Offensive Security Certified Professional) is a Plus.</li>
<li>Expertise in Log aggregation, Correlation and alerting using commercial and Open Source tools</li>
<li>Experience with SIEM solutions like Splunk, Sumologic, ELK, etc.</li>
<li>Required knowledge of open source and commercial application security tools and frameworks.</li>
<li>Understanding of OWASP Risks, Vulnerabilities and Mitigation Mechanisms.</li>
</ul>
Perks &amp; Benefits:
<ul>
<li>Fully paid Health &amp; Life insurance for full-time employees and family members.</li>
<li>Monthly stipend to support your work and productivity.</li>
<li>12 days paid Vacation + Flexible Time Away Program.</li>
<li>20 weeks fully paid Maternity Leave.</li>
<li>12 weeks fully paid Paternity/Adoption Leave.</li>
<li>Personal paid Volunteer Day to support our community.</li>
<li>Opportunities for professional growth and development including access to LinkedIn Learning online courses.</li>
<li>Company Funded Perks including a counseling membership and your own personal Smartsheet account.</li>
<li>Teleworking options from any registered location in Costa Rica (role specific).</li>
</ul>
Equal Opportunity Employer:
Smartsheet is an Equal Opportunity Employer committed to fostering an inclusive environment with the best employees. We provide employment opportunities without regard to any legally protected status in accordance with applicable laws in the US, UK, Australia, and Costa Rica. If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.
At Smartsheet, we strive to build an inclusive environment that encourages, supports, and celebrates the diverse voices of our team members who also represent the diverse needs of our customers. We're looking for people who are driven, authentic, supportive, effective, and honest. You're encouraged to apply even if your experience doesn't precisely match our job description—if your career path has been nontraditional, that will set you apart. At Smartsheet, we welcome diverse perspectives and people who aren't afraid to be innovative—join us!#BI-Remote
#LI-Remote

San José

Security Analyst

Coupang

* English text will follow the Korean version

회사 소개 
쿠팡은 고객이 쿠팡앱을 열어보는 순간부터 상품을 문 앞으로 배송받는 순간까지, 고객 한 분 한 분에게 감동을 줄 수 있도록 쇼핑의 경험을 새롭게 창조하고 있습니다. 
뛰어난 엔드투엔드(end-to-end) 이커머스와 물류 네트워크, 그리고 고집스러울 정도로 고객만을 생각하는 문화를 바탕으로 쿠팡은 속도, 셀렉션, 그리고 가격 중 그 무엇도 포기하지 않았습니다. 지금 쿠팡은 신선식품을 포함한 수백만 개의 상품이 단 몇 시간 내에 전국 단위로 1년 365일 배송되는 혁신을 실현하였습니다.
이 모두는 한국 이커머스 시장의 수백 만 고객을 위한 쿠팡의 노력입니다. 한국은 세계 어느 나라 보다 크고 빠르게 성장하는 이커머스 기회를 가진 시장입니다.

직무소개
IAM Architecture and Governance 팀은 기업을 보호하고 규제를 준수하며 운영 효율을 최대화하기 위한 IAM 인프라와 거버넌스 절차의 설계, 도입, 실행을 담당합니다.

업무 내용 
<ul>
<li>IAM 거버넌스 프로세스가 올바르게 수행되도록 검토, 접근 권한 관리 요구사항 정의 및 테스트</li>
<li>IAM 절차, 실무 및 인프라가 정상적으로 작동하며 효율적으로 운영되어 비즈니스 및 규제 요구사항을 충족하도록 관리</li>
<li>정보 시스템 내 접근 통제 설계와 적용 관련 애플리케이션 팀 자문</li>
<li>IAM Architecture and Governance function의 아키텍처 패턴 및 best practice 유지</li>
<li>비즈니스 목표 달성 지원 및 성과 달성을 위한 팀 관리</li>
</ul>

자격요건
<ul>
<li>커뮤니케이션 및 relationship development에 능통하신 분</li>
<li>데이터, 시스템 및 IAM 기술 관련 전문 지식을 보유하신 분</li>
<li>Excel, Phython, API, SQL 등을 이용한 데이터 운용 기술을 보유하신 분</li>
<li>정보 시스템 설계 경험을 보유하신 분</li>
<li>채용 및 팀 관리 경험을 보유하신 분</li>
</ul>

우대사항
<ul>
<li>정보 보안 자격증을 보유하신 분</li>
<li>기술 위험 관리 능력</li>
<li>SOX 컴플라이언스 관련 경험을 보유하신 분</li>
</ul>

전형 절차 및안내사항
<ul>
<li>전형절차
<ul>
<li>서류전형 - 전화면접 - 대면면접 – 최종 합격</li>
<li>전형 절차는 직무별로 다르게 운영될 수 있으며, 일정 및 상황에 따라 변동될 수 있습니다. </li>
<li>전형 일정 및 결과는 지원서에 등록하신 이메일로 개별안내드립니다. </li>
</ul>
</li>
<li>참고사항
<ul>
<li>본 공고는 모집 완료 시 조기 마감될 수 있습니다. </li>
<li>지원서 내용 중 허위사실이 있는 경우에는 합격이 취소될 수 있습니다.</li>
<li>보훈대상자 및 장애인 여부는 채용 과정에서 어떠한 불이익도 미치지 않습니다. </li>
</ul>
</li>
<li>개인정보 처리방침 
<ul>
<li>쿠팡 그룹은 입사지원자 개인정보 처리방침(아래 링크)에 따라 귀하의 개인정보를 수집하여 처리합니다. <a href="https://www.coupang.jobs/kr/privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.coupang.jobs/kr/privacy-policy/</a></li>
</ul>
</li>
<li>서류반환 정책 
<ul>
<li>본 고지는 『채용절차의 공정화에 관한 법률』 제11조 제6항에 따른 것입니다. </li>
<li>당사 채용에 응시한 구직자 중 최종합격이 되지 못한 구직자는 『채용절차의 공정화에 관한 법률』에 따라 제출한 채용서류의 반환을 청구할 수 있음을 알려 드립니다. 다만, 홈페이지 또는 전자우편으로 제출된 경우나 구직자가 당사의 요구 없이 자발적으로 제출한 경우에는 그러하지 아니하며, 천재지변이나 그 밖에 당사에게 책임 없는 사유로 채용서류가 멸실된 경우에는 반환한 것으로 봅니다.  </li>
<li>위 2항 본문에 따라 채용서류 반환 청구를 하는 구직자는 채용서류 반환청구서[채용절차의 공정화에 관한 법률 시행규칙 별지 제3호 서식]를 작성하여 당사 이메일(<a href="mailto:recruitingops@coupang.com%22%20%5Ct%20%22_blank" rel="noopener noreferrer nofollow ugc" target="_blank">recruitingops@coupang.com</a>)로 제출하면, 제출이 확인된 날로부터 14일 이내에 지정한 주소지로 등기우편을 통하여 발송해 드립니다. 이 경우 등기우편요금은 수신자 부담으로 하게 되오니 유념하시기 바랍니다.  </li>
<li>당사는 위 2항 본문에 따른 구직자의 반환 청구에 대비하여 채용 여부가 확정된 날로부터 180일간 구직자가 제출한 채용서류 원본을 보관하게 되며, 그때까지 채용서류의 반환을 청구하지 아니할 경우에는 『개인정보 보호법』에 따라 지체 없이 채용서류 일체를 파기할 예정입니다. </li>
</ul>
</li>
</ul>



Company Introduction
Coupang is reimagining the shopping experience with the goal of wowing each customer from the instant they open the Coupang app to the moment an order is delivered to their door.Powered by an outstanding end-to-end e-commerce and logistics network and a fanatical culture of customer centricity, Coupang has broken tradeoffs around speed, selection and price. Today, we provide exceedingly fast shipping speeds on millions of items including fresh groceries, delivered within hours nationwide, 365 days a year. We are doing this for millions of consumers in Korea. Korea is home to one of the largest and fastest growing e-commerce opportunities anywhere in the world.

Role Overview
The IAM Architecture and Governance team is responsible and accountable for the design, implementation, and execution of the IAM facilities and governance processes required to protect the firm, ensure regulatory compliance, and enable operational effectiveness.

What You Will Do
<ul>
<li>Ensuring that the IAM governance processes are operating correctly by defining access management requirements, developing tools to implement and test those requirements.</li>
<li>Ensuring IAM processes, practices and facilities function correctly, operate effectively, and meet our business and regulatory requirements.</li>
<li>Assessing access control requirements and assisting application teams designing and building access controls into their systems.</li>
<li>Maintaining the architecture patterns and best practices of the IAM Architecture and Governance function.</li>
<li>Enabling business objectives and managing a team to deliver results.</li>
</ul>

Basic Qualifications
<ul>
<li>Demonstrates effective communication and relationship development.</li>
<li>Demonstrates technical understanding of and ability to communicate effectively about data, information systems and identity and access control technologies.</li>
<li>Ability to work with data to provide useful information using excel, python, APIs, and SQL.</li>
</ul>

Preferred Qualifications:
<ul>
<li>Information Security Certifications.</li>
<li>Technology risk management.</li>
<li>SOX compliance experience.</li>
</ul>

Recruitment Process and Others
<ul>
<li>Recruitment Process</li>
</ul>
<ol>
<li>Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview - Offer </li>
<li>The exact nature of the recruitment process may vary according to the specific job, and maybe changed due to scheduling or other circumstances.</li>
<li>Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. </li>
</ol>
<ul>
<li>Things to Consider  </li>
</ul>
<ol>
<li>This job posting may be closed prior to the stated end date for application if all openings are filled.    </li>
<li>Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.    </li>
<li>Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants. </li>
</ol>
<ul>
<li>Privacy Notice  </li>
</ul>
<ol>
<li>Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.<a href="https://rocketyourcareer.kr.coupang.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">https://rocketyourcareer.kr.coupang.com/privacy-policy </a> (Korea)<a href="https://rocketyourcareer.usa.coupang.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">https://rocketyourcareer.usa.coupang.com/privacy-policy </a> (U.S.)<a href="https://rocketyourcareer.cn.coupang.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">https://rocketyourcareer.cn.coupang.com/privacy-policy </a> (China) </li>
</ol>
<ul>
<li>Document Return Policy  </li>
</ul>
<ol>
<li>This notification is given pursuant to Article 11 (6) of the Fair Hiring Procedure Act.  </li>
<li>A job applicant, who has applied but not been finally selected for a position at Coupang (the “Company”), may request the Company to return his/her hiring documents submitted pursuant to the Fair Hiring Procedure Act.  However, this will not apply where the hiring documents were submitted via the website of the Company or e-mail, or where the job applicant submitted those documents voluntarily without a request from the Company.  In addition, if the hiring documents were destroyed due to a natural disaster or any other reasons not attributable to the Company, such documents will be deemed to have been returned to the job applicant.</li>
<li>A job applicant who wishes to request the return of his/her hiring documents pursuant to the main sentence of paragraph 2 above should fill out a “Request for Return of Hiring Documents” [Annex Form No. 3 in the Enforcement Rule of the Fair Hiring Procedure Act] and submit the request to the Company by email ( recruitingops@coupang.com ) In such case, within fourteen (14) days from the date of identifying the receipt of the request, the Company will send the hiring documents to the job applicant’s designated address via registered mail.  Please be informed that the job applicant is required to pay the postage on the registered mail. </li>
<li>In preparation for a job applicant’s request for the return of hiring documents pursuant to the main sentence of paragraph 2 above, the Company shall retain the original hiring documents submitted by the job applicant for 180 days from the completion of the recruiting process.  If no request is made until the end of this period, all of his/her hiring documents will be destroyed immediately in accordance with the Personal Information Protection Act. </li>
</ol>

Seoul

Staff Security Engineer (Identity &amp; Access Management - Architecture &amp; Governance)

Apply to Regulatory Compliance Cyber Security Jobs in companies remotely and near you. New Regulatory Compliance Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Program Manager - Governance, Risk and Compliance (GRC) at SingleStore	Application Security CCPA CISA CISM Cissp
Senior Manager, Governance, Risk & Compliance at Justworks, Inc.	Agile CISM Cissp Golangvernance Malware
Risk and Compliance Analyst at Palantir Technologies	Agile Audits CIA CISA Cissp
Security Analyst at Smartsheet	Application Security AWS Azure Cissp GCP
Staff Security Engineer (Identity & Access Management - Architecture & Governance) at Coupang	Golangvernance Privacy Python Regulatory Compliance Risk Management

Regulatory Compliance Cyber Security Jobs

0 Regulatory Compliance Cyber Security Jobs. Page 1 of 1

5 closed regulatory compliance cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Regulatory Compliance Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Regulatory Compliance Cyber Security Jobs

0 Regulatory Compliance Cyber Security Jobs. Page 1 of 1

5 closed regulatory compliance cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Regulatory Compliance Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter