[Coupang] Senior Principal, Privacy Compliance Monitoring

Company Introduction

Coupang exists to deliver customer delight. When customers say, “How did we ever live without Coupang?”, we know we are fulfilling our mission. With the single-minded determination to make our customers’ shopping, dining and everyday lives easier, Coupang is leading innovation across the multi-billion-dollar e-commerce industry. Coupang is one of the fastest-growing e-commerce companies and has built a unique position in the domestic commerce industry and customer trust. 

We pride ourselves on being a large global listed company grounded in startup culture. This preserves the agility of our founding days and is the growth engine behind our constant launch of new services and expansion of our business. Every Coupang employee has the opportunity to embrace an entrepreneurial spirit and drive new innovations and initiatives. The boldness to dive into work without hesitation and achieve results is the essence of how Coupang works. At Coupang, you will witness yourself, your colleagues, your team and the whole company growing every day. 

Every Coupang employee is committed to the Coupang mission of shaping the future of commerce. We solve customer problems, challenge conventional thinking and received wisdom, and push beyond what is considered achievable. If you want an amazing work experience in an always-on, high-tech and hyper-connected world, join Coupang today.

Job Introduction 

Responsibilities 

• Establish an enterprise-wide compliance monitoring strategy based on personal and location information laws and global standards
• Regularly and continuously check and evaluate regulatory compliance across domestic and international services and internal business processes
• Analyse the business impact of identified risks and determine response priorities according to their importance
• Verify the adequacy and effectiveness of improvement measures for non-compliance and confirm whether technical and administrative enhancements are in place
• Assess the personal data protection standards of external contractors and carry out management and improvement activities to mitigate risks

Requirements 

• Holding a bachelor’s degree or higher and having more than 12 years of practical experience in domestic and international personal data compliance
• In-depth understanding of, and practical application capability for, relevant laws such as the Personal Information Protection Act and the Act on the Protection, Use, etc. of Location Information
• Experience directly designing and operating a personal data management system or monitoring framework in a large organisation
• Excellent communication skills to work effectively with a variety of internal and external stakeholders and coordinate complex issues
• High ethical standards and a sense of responsibility, with a proactive attitude to solving problems

Preferred Qualifications 

• Compliance experience at a technology company that processes large volumes of personal data, such as an e-commerce or IT platform
• Technical understanding of cloud-native environments and MSA
• Master’s or doctoral degree in personal data protection or information security, along with business English communication and English technical writing skills
• Holding relevant certifications such as CISA, CISSP, ISMS-P, ISO27001 or CPPG, and experience automating compliance checks and improving efficiency through data analysis 

Selection Process and Important Information

• Selection Process
  • Document screening - Job fit interview - Core competency interview - Final decision
  • The selection process may vary by role and may change depending on schedule and circumstances.
  • Selection schedules and results will be notified individually to the email address registered on your application.
• Notes
  • This posting may close early once recruitment is complete.
  • If there is any false information in the application, the offer may be cancelled.
  • Employment-protected candidates (veterans, persons with disabilities, etc.) may receive preferential treatment in accordance with applicable law.
  • Job title and scope of responsibilities may be changed in consideration of the candidate’s overall career and experience. If such a change is necessary, we will communicate with the candidate at an appropriate time before the final offer notification.
  • Employment may be restricted if the statutory qualifications required for recruitment and job performance are not met.

Personal Information Processing Policy 

• The Coupang Group collects and processes your personal information in accordance with its Applicant Personal Information Processing Policy (link below). https://www.coupang.jobs/kr/privacy-policy/

Document Return Policy 

1. This notice is provided pursuant to Article 11(6) of the Act on Fair Hiring Procedures.
2. Candidates who applied to us and were not finally selected may request the return of the recruitment documents they submitted, in accordance with the Act on Fair Hiring Procedures. However, this does not apply to documents submitted via our website or by email, or documents voluntarily submitted without our request. If recruitment documents are lost due to natural disasters or other reasons not attributable to us, they are deemed returned.
3. Candidates requesting return of documents under paragraph 2 above shall complete a recruitment document return request form [Form No. 3 of the Enforcement Rules of the Act on Fair Hiring Procedures] and submit it by email ([contact details removed]). Once submission is confirmed, we will send the documents by registered mail to the address specified within 14 days of that date. Please note that the registered mail charges will be payable by the recipient. 
4. In preparation for return requests under paragraph 2 above, we will retain the original recruitment documents submitted by candidates for 180 days from the date the hiring decision is confirmed. If return is not requested by then, we will destroy all recruitment documents without delay in accordance with the Personal Information Protection Act.
5. However, the contents of paragraphs 1 to 4 above apply only where Korean labour laws apply. They do not apply in other cases.