Staff Security Engineer - Fintech Information Security
Coupang
Full-time|On-site|Seoul, South Korea Join Our Innovative Fintech Team Coupang's Fintech division is dedicated to transforming customer shopping experiences by delivering innovative financial services. With the launch of our new Fintech business, we aim to enhance customers' financial lives within the Coupang ecosystem, creating value across various areas such as payment solutions, asset management, and improved financial accessibility. Key Responsibilities: Conduct risk assessments and manage electronic financial risks. Perform security evaluations of electronic finance platforms, infrastructure, and applications. Review compliance with electronic finance and information security regulations. Identify service improvement opportunities through risk analysis and manage their implementation. Establish and operate information security policies and management systems. Create and implement information security policies, management plans, and guidelines. Conduct internal control activities related to information security. Develop and enhance procedures for efficient evaluation and maintenance of information security levels. Maintain security certifications and liaise with electronic finance regulatory bodies. Support auditing for information security certifications (such as ISMS-P, ISO27001, PCI-DSS). Qualifications: Practical experience in compliance roles within fintech, financial institutions, credit information companies, mydata, or commerce companies. Bachelor's degree or higher in Computer Science, Information Security, or a related field. A minimum of 8 years of experience in IT security governance and information protection roles. Understanding of the regulatory environment in the financial sector and familiarity with ISMS-P, PCI-DSS, ISO standards. Knowledge of technology risk frameworks, best practices, and standards. Experience with security in cloud platforms (AWS, Azure, GCP). Deep understanding of financial IT and information security compliance. Preferred Qualifications: Strong understanding of technology risk management concepts and effective controls, policies, and procedures for risk prevention, detection, and mitigation. Experience designing and implementing effective security solutions based on platform architecture standards, business goals, and regulatory guidelines. Experience with inspections and responses from financial supervisory authorities. Experience or certifications in information security frameworks such as ISMS-P, ISO-27001, PIA. Possession of information security certifications like CISSP/CISA. Excellent interpersonal, verbal, and written communication skills in both Korean and English, including the ability to present and communicate technical elements of risk and impact. Proven ability to work independently and proactively with demonstrated results. Aptitude for working in a fast-paced environment. Knowledge or experience with DevOps, DevSecOps, and Agile methodologies. Extensive experience collaborating with external vendors and third-party service providers. Experience in planning roles such as information security or IT budget management. A strong emphasis on teamwork. Application Process: Selection Process: Document screening - 1st video interview - 2nd in-depth video interview - 3rd executive interview (video) – Final offer
Apr 13, 2026