Governance Risk And Compliance Jobs in California
Governance Risk And Compliance jobs in California represent one of the most active markets in the country, concentrated in financial services, technology, healthcare, and defense contracting across a seniority range from analyst and associate through chief compliance officer. San Francisco, Los Angeles, and San Diego are the primary hiring hubs, where major employers such as Wells Fargo, Kaiser Permanente, and Qualcomm maintain substantial compliance and risk functions. The most in-demand specialties include enterprise risk management, regulatory compliance for fintech and biotech, and cybersecurity governance. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 12+ Governance Risk And Compliance jobs
We exist to wow our customers. We know we're doing the right thing when we hear our customers say, "How did I ever live without Coupang?" Born out of an obsession to make shopping, eating, and living easier than ever, we are collectively disrupting the multi-billion-dollar commerce industry from the ground up and establishing an unparalleled reputation for being leading and reliable force in South Korean commerce.
We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.
Our mission to build the future of commerce is real. We push the boundaries of what's possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.
Role Overview
The Security GRC Manager will lead the evolution of Coupang's cybersecurity risk management and control governance capabilities, with a focus on continuous risk visibility, data-driven risk oversight, and measurable risk reduction. This leader will establish scalable methodologies to identify, assess, prioritize, and monitor cybersecurity risks across Coupang's complex technology environment, moving beyond periodic assessments toward continuous, evidence-based risk management.
Working closely with AI GRC, Control Assurance, Security Engineering, Security Architecture, and broader Engineering teams, the Security GRC Manager will help develop a unified enterprise risk management and control governance framework across AI and cybersecurity. The role will drive consistent risk methodologies, effective control governance, and clear accountability for risk treatment, enabling leadership to make informed decisions about the organization's evolving risk posture.
What You Will Do
- Enterprise Cybersecurity & AI Risk Management
- End-to-End Risk Lifecycle: Drive scalable methodologies to identify, assess, prioritize, monitor, and escalate cybersecurity risks across high-scale technology environments.
- Unified Cyber & AI Framework: Partner closely with AI GRC to maintain a unified risk taxonomy and governance framework, harmonizing global industry standards (e.g., NIST CSF, NIST AI RMF, ISO 27001, ISO 42001) with local and regional regulatory obligations.
- Continuous, Data-Driven Visibility: Maintain an actionable enterprise risk register connecting inherent risks, control gaps, treatment plans, and residual exposure through automated data feeds.
- Executive Metrics & Reporting: Establish Key Risk Indicators and management reporting to translate technical findings, assurance results, and emerging threats into actionable business risk insights.
- Control Governance & Monitoring
- Control Lifecycle & Standards: Establish and mature the cybersecurity control governance framework, defining control objectives, ownership expectations, and effectiveness criteria.
- Assurance & Root-Cause Integration: Partner with Control Assurance to ingest testing trends and systemic control deficiencies into risk assessments without duplicating operational audit testing.
- Harmonization & Traceability: Drive control framework harmonization across global regulatory requirements and internal standards to improve traceability and eliminate duplication.
- Continuous Control Monitoring: Collaborate with Control Assurance to define priorities for automated control validation and real-time posture tracking.
- Team Leadership & Stakeholder Accountability
- Team Development: Lead, mentor, and scale a high-performing Security GRC team, setting strategic roadmaps, clear ownership, and measurable delivery standards.
- Constructive Challenge: Partner with accountable risk owners across the business to establish remediation plans, track progress, and constructively challenge risk acceptance decisions.
- Culture & Influence: Influence cross-functional engineering, product, and leadership stakeholders to embed risk accountability directly into software development and business operations.
What You Will Need
- Deep expertise in cybersecurity governance, risk management, and control frameworks, with the ability to translate technical weaknesses into business risk.
- Proven track record establishing risk assessment methodologies, risk registers, risk treatment workflows, and executive reporting.
- Demonstrated ability to evolve periodic assessments toward continuous, data-driven risk management and evidence-based risk oversight.
- Strong understanding of control design, effectiveness testing, and the relationship between control performance and residual risk.
- Excellent communication and stakeholder management skills, including the ability to constructively challenge risk decisions and influence senior leaders.
- Experience leading cross-functional initiatives and mentoring governance, risk, or security professionals.
- Technical understanding of cloud infrastructure, application security, and modern security controls (hands-on security engineering experience is a plus).
Basic Qualifications
- 6+ years of progressive experience in cybersecurity governance, risk management, security engineering, or a related field.
- Demonstrated experience building or maturing cybersecurity risk management capabilities in complex, high-scale technology environments.
- Proven experience leading teams, strategic initiatives, and cross-functional programs.
- Bachelor's degree in a related field or equivalent professional experience.
- Working knowledge of cybersecurity and AI governance frameworks, including NIST CSF, NIST AI RMF, ISO 42001, and ISO 27001.
- Direct experience managing enterprise risk registers, overseeing remediation/treatment lifecycles, and reporting material risk exposure.
Preferred Qualifications
- Experience in writing java/spring boot applications in AWS and Kubernetes environment
- Experience in application security/product security in building Static and dynamic
- security testing tools, container scanning pipelines, open-source software vulnerabilities
- remediation pipelines, Kubernetes security
- Experience in leading/mentoring other engineers to build a security or infrastructure
- service from scratch
- Experience identifying, testing, and remediating against vulnerabilities including those
- found in the OWASP Top 10 and CWE/SANS Top 25, writing exploits and verification
Pay & Benefits
Our compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation.
The base pay for this position ranges from $164,000/year in our lowest geographic market to $282,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience.
General Description of All Benefits
- Annual bonus is 0-20% of the base salary
- Medical/Dental/Vision/Life, AD&D insurance
- Flexible Spending Accounts (FSA) & Health Savings Account (HAS)
- Long-term/Short-term Disability
- Employee Assistance Program (EAP) program
- 401K Plan with Company Match
- 18-21 days of Paid Time Off (PTO) a year based on the tenure
- 12 Paid Holidays
- Paid Parental leave
- Pre-tax commuter benefits
- MTV- [Free] Electric Car Charging Station
General Description of Other Compensation
"Other Compensation" includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale.
Recruitment Process
- Application Review - Job Fit Interview - Focus Interview – Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.
Details to Consider
- This job posting may be closed prior to the stated end date for application if all openings are filled.
- Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection (recipients of veteran's benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.
Privacy Notice
Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/
Coupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender(including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate.
If you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at usrecruiting@coupang.com.
Equal Opportunities for All
- Coupang is an equal opportunity employer. Our unprecedented success could not be possible without the valuable inputs of our globally diverse team.
Job Requisition ID: R0080970
We exist to wow our customers. We know we're doing the right thing when we hear our customers say, "How did I ever live without Coupang?" Born out of an obsession to make shopping, eating, and living easier than ever, we are collectively disrupting the multi-billion-dollar commerce industry from the ground up and establishing an unparalleled reputation for being leading and reliable force in South Korean commerce.
We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.
Our mission to build the future of commerce is real. We push the boundaries of what's possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.
Role Overview
The Security GRC Manager will lead the evolution of Coupang's cybersecurity risk management and control governance capabilities, with a focus on continuous risk visibility, data-driven risk oversight, and measurable risk reduction. This leader will establish scalable methodologies to identify, assess, prioritize, and monitor cybersecurity risks across Coupang's complex technology environment, moving beyond periodic assessments toward continuous, evidence-based risk management.
Working closely with AI GRC, Control Assurance, Security Engineering, Security Architecture, and broader Engineering teams, the Security GRC Manager will help develop a unified enterprise risk management and control governance framework across AI and cybersecurity. The role will drive consistent risk methodologies, effective control governance, and clear accountability for risk treatment, enabling leadership to make informed decisions about the organization's evolving risk posture.
What You Will Do
- Enterprise Cybersecurity & AI Risk Management
- End-to-End Risk Lifecycle: Drive scalable methodologies to identify, assess, prioritize, monitor, and escalate cybersecurity risks across high-scale technology environments.
- Unified Cyber & AI Framework: Partner closely with AI GRC to maintain a unified risk taxonomy and governance framework, harmonizing global industry standards (e.g., NIST CSF, NIST AI RMF, ISO 27001, ISO 42001) with local and regional regulatory obligations.
- Continuous, Data-Driven Visibility: Maintain an actionable enterprise risk register connecting inherent risks, control gaps, treatment plans, and residual exposure through automated data feeds.
- Executive Metrics & Reporting: Establish Key Risk Indicators and management reporting to translate technical findings, assurance results, and emerging threats into actionable business risk insights.
- Control Governance & Monitoring
- Control Lifecycle & Standards: Establish and mature the cybersecurity control governance framework, defining control objectives, ownership expectations, and effectiveness criteria.
- Assurance & Root-Cause Integration: Partner with Control Assurance to ingest testing trends and systemic control deficiencies into risk assessments without duplicating operational audit testing.
- Harmonization & Traceability: Drive control framework harmonization across global regulatory requirements and internal standards to improve traceability and eliminate duplication.
- Continuous Control Monitoring: Collaborate with Control Assurance to define priorities for automated control validation and real-time posture tracking.
- Team Leadership & Stakeholder Accountability
- Team Development: Lead, mentor, and scale a high-performing Security GRC team, setting strategic roadmaps, clear ownership, and measurable delivery standards.
- Constructive Challenge: Partner with accountable risk owners across the business to establish remediation plans, track progress, and constructively challenge risk acceptance decisions.
- Culture & Influence: Influence cross-functional engineering, product, and leadership stakeholders to embed risk accountability directly into software development and business operations.
What You Will Need
- Deep expertise in cybersecurity governance, risk management, and control frameworks, with the ability to translate technical weaknesses into business risk.
- Proven track record establishing risk assessment methodologies, risk registers, risk treatment workflows, and executive reporting.
- Demonstrated ability to evolve periodic assessments toward continuous, data-driven risk management and evidence-based risk oversight.
- Strong understanding of control design, effectiveness testing, and the relationship between control performance and residual risk.
- Excellent communication and stakeholder management skills, including the ability to constructively challenge risk decisions and influence senior leaders.
- Experience leading cross-functional initiatives and mentoring governance, risk, or security professionals.
- Technical understanding of cloud infrastructure, application security, and modern security controls (hands-on security engineering experience is a plus).
Basic Qualifications
- 6+ years of progressive experience in cybersecurity governance, risk management, security engineering, or a related field.
- Demonstrated experience building or maturing cybersecurity risk management capabilities in complex, high-scale technology environments.
- Proven experience leading teams, strategic initiatives, and cross-functional programs.
- Bachelor's degree in a related field or equivalent professional experience.
- Working knowledge of cybersecurity and AI governance frameworks, including NIST CSF, NIST AI RMF, ISO 42001, and ISO 27001.
- Direct experience managing enterprise risk registers, overseeing remediation/treatment lifecycles, and reporting material risk exposure.
Preferred Qualifications
- Experience in writing java/spring boot applications in AWS and Kubernetes environment
- Experience in application security/product security in building Static and dynamic
- security testing tools, container scanning pipelines, open-source software vulnerabilities
- remediation pipelines, Kubernetes security
- Experience in leading/mentoring other engineers to build a security or infrastructure
- service from scratch
- Experience identifying, testing, and remediating against vulnerabilities including those
- found in the OWASP Top 10 and CWE/SANS Top 25, writing exploits and verification
Pay & Benefits
Our compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation.
The base pay for this position ranges from $164,000/year in our lowest geographic market to $282,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience.
General Description of All Benefits
- Annual bonus is 0-20% of the base salary
- Medical/Dental/Vision/Life, AD&D insurance
- Flexible Spending Accounts (FSA) & Health Savings Account (HAS)
- Long-term/Short-term Disability
- Employee Assistance Program (EAP) program
- 401K Plan with Company Match
- 18-21 days of Paid Time Off (PTO) a year based on the tenure
- 12 Paid Holidays
- Paid Parental leave
- Pre-tax commuter benefits
- MTV- [Free] Electric Car Charging Station
General Description of Other Compensation
"Other Compensation" includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale.
Recruitment Process
- Application Review - Job Fit Interview - Focus Interview – Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.
Details to Consider
- This job posting may be closed prior to the stated end date for application if all openings are filled.
- Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection (recipients of veteran's benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.
Privacy Notice
Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/
Coupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender(including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate.
If you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at usrecruiting@coupang.com.
Equal Opportunities for All
- Coupang is an equal opportunity employer. Our unprecedented success could not be possible without the valuable inputs of our globally diverse team.
Job Requisition ID: R0080970
See All 12 Governance Risk And Compliance Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find JobsGovernance Risk And Compliance Jobs by City in California
Where California roles are concentrated, by current openings.
Governance Risk And Compliance Job Market in California
A snapshot from current California openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Biotechnology & Pharmaceuticals
What California Employers Look For
The qualifications that appear most often in governance risk and compliance jobs across California.
- Bachelor's degree in business, finance, law, or a related field required
- Certified Compliance and Ethics Professional or CISA certification strongly preferred
- Three or more years of experience in risk, audit, or regulatory compliance functions
- Working knowledge of California-specific regulations including CCPA and DFPI requirements
- Demonstrated experience conducting risk assessments, audits, or internal control reviews
- Familiarity with frameworks such as COSO, ISO 31000, or NIST for governance programs
Governance Risk And Compliance Jobs in California: Frequently Asked Questions
How do you become a governance risk and compliance in California?
Most governance risk and compliance roles in California require at minimum a bachelor's degree in business administration, finance, accounting, law, or a related field. From there, employers consistently favor candidates who hold recognized credentials such as the Certified Compliance and Ethics Professional designation, the Certified Internal Auditor certification, or ISACA's CISA or CRISC for technology-focused roles. California's large regulated industries, including banking supervised by the Department of Financial Protection and Innovation and healthcare oversight under DHCS, create strong demand for professionals who understand state-specific regulatory frameworks alongside federal requirements.
Which companies hire governance risk and compliances in California?
Employers hiring governance risk and compliances in California right now include Whatnot, NA, and Ivalua, based on current listings on Migrate Mate as of November 2026. California's dense concentration of publicly traded technology companies, major banks, and large health systems means governance risk and compliance hiring tends to be broad and consistent throughout the year.
Which California cities have the most governance risk and compliance jobs?
Los Angeles, San Francisco, and Oakland have the most governance risk and compliance openings in California. San Francisco leads due to its concentration of financial services firms, fintech startups, and technology companies with extensive regulatory obligations, while Los Angeles draws volume from entertainment, healthcare, and aerospace, and San Diego's strength in biotech and defense contracting sustains steady demand for compliance professionals in those sectors.
Are there remote governance risk and compliance jobs in California?
Yes, and more than most fields. About 67% of governance risk and compliance openings tied to California are remote or hybrid as of November 2026, reflecting that much of the work involves policy review, documentation, risk assessments, and regulatory analysis that can be done without a fixed office. Policy development, third-party risk management, and compliance monitoring roles tend to be the most consistently available in remote or hybrid formats.
How can I get hired as a governance risk and compliance in California with little or no experience?
The most realistic entry path is moving from an adjacent role in internal audit, legal operations, finance, or IT security into a compliance analyst or junior risk associate position. Large California employers including major Bay Area technology companies, Kaiser Permanente, and the larger regional banks regularly post associate compliance and risk analyst roles that are structured for candidates with a relevant degree but limited direct experience. Earning an entry-level credential such as the CAMS for financial crime or the CompTIA Security Plus for cybersecurity governance noticeably strengthens applications, as does any internship or co-op experience with a California-regulated industry.
Where can I find and apply to governance risk and compliance jobs in California?
You can find and apply to governance risk and compliance jobs in California on Migrate Mate, which lists current California openings across industries and seniority levels. Find the roles that fit your background and apply directly.
See All 12 Governance Risk And Compliance Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Jobs