Apply on Employer Site

Coupang Fulfillment Services · 2 months ago

Sr Staff Technical Program Manager - Compliance

Mountain View, USA

Full-time

Onsite

Senior Level, Lead/Staff

$142K/yr - $309K/yr

10+ years exp

Coupang is a rapidly growing retail company known for its innovative approach to commerce. The Sr Staff Technical Program Manager - Compliance will oversee IT compliance efforts, manage risks related to financial statements, and collaborate with various teams to enhance the IT SOX compliance program.

DeliveryLogisticsWarehousing

Responsibilities

Partner between Engineering & Corp IT for internal and external IT control audits, participate in IT walkthroughs, and assist management in responding to internal and external auditor requests relating to ITGCs, IT Application Controls (ITACs), and Key Reports, as necessary

Prioritize, scope and drive IT control initiatives across engineering organizations, manage and communicate project milestones to ensure successful delivery

Identify and manage compliance risks & gaps take precaution measures to mitigate the risk, unblock the program

Develop and drive short / long term strategic initiatives to enhance and scale IT SOX program effectiveness

Design, implementation and ongoing monitoring of IT general controls across Coupang Engineering and Corporate IT systems and its subsidiaries, which may include design of relevant processes or technical infrastructure to support controls

Driving IT control deficiency remediation efforts, including conducting root cause analysis, impact analysis, identify mitigating controls, creating remediation plans and hands-on coordination with IT process owners ensuring the success of remediation activities

Perform quarterly IT deficiency evaluations in coordination with Finance

Documentation and management of ITGC narratives, Risk and Controls Matrix, and the inventory of SOX in-scope IT systems, applications, supporting tools, and financial data flow mapping and keep them up to date on a regular basis

Ensure all ITGC Documentation, findings and audit requests are stored, collaborated on and accessible on the Company’s centralized SOX program management tool (Workiva)

Develop an deep understanding of the company’s platform infrastructure and processes, including knowledge of risks to service-oriented technology architecture, and how those systems interact with Corporate IT systems for the purposes of financial reporting

Maintain an awareness of new and emerging IT risks, regulations and trends that impact technology controls and IT controls accordingly

In partnership with Finance, Security, Engineering, and Corp IT teams, manage and remediate SOD conflicts identified in relevant financial reporting systems

Maintain an inventory of SOX in-scope 3rd party service organizations, obtain, and evaluate SOC reports based on a defined frequency, document results, and lead remediation of any unmitigated risks

Qualification

IT SOX complianceIT General ControlsSarbanes-Oxley Section 404IT risk managementProfessional auditing designationAWS services familiarityCommunicationCross-team collaborationProblem-solving

Required

Bachelor's degree computer sciences, mathematics, management/computer information systems, accounting, or related fields

Around 10 years of related work experience in information technology SOX compliance, IT risk management, or related fields

Strong knowledge of Sarbanes-Oxley Section 404 (SOX) and IT General Controls

Professional auditing, security, or technology designation (e.g., CIA, CISA, CISSP, CISRM, etc.)

Knowledge of IT / Information Security risks and controls principles

Foundation in analyzing, problem determination, and resolving complex IT problems

Experienced with controls, or risk management with both enterprise applications and developed software, including: Service oriented architecture concepts, Distributed systems access management and service deployment, Modern software development practices

Strong familiarity with AWS services and containerized distributed systems

Strong familiarity with relational, object-oriented and messaging queue infrastructure