What You'll Do:
- Manage all external assurance programs (SOC 1/2, HIPAA, TISAX, C5) end-to-end, including scoping, framework mappings, control applicability, and continuous certification readiness.
- Lead annual and quarterly readiness cycles and maintain a Continuous Compliance Calendar to ensure evidence, documentation, and control artifacts remain current and audit-ready.
- Oversee evidence governance quality, completeness, validation, and version control across our GRC platform and internal repositories; partner with control owners to remediate gaps.
- Serve as custodian of all control requirements, mappings, ownership, and updates within GRC platform while maintaining authoritative control inventories and maturity scoring.
- Own remediation governance for assurance findings, including prioritization, tracking, root-cause-aligned closure evidence, and maintenance of the Corrective Action & Remediation Tracker.
- Monitor regulatory and framework changes, lead gap assessments for new certifications, and ensure accuracy and currency of all external-facing assurance artifacts on the trust/assurance portal.
What You Will Bring to Coupa:
- 5–8+ years of experience in security compliance, audit, GRC, or assurance program management.
- Direct experience supporting or owning major compliance frameworks (SOC 2, HIPAA, ISO 27001, TISAX, or similar).
- Strong knowledge of security controls across cloud infrastructure, IAM, logging/monitoring, and data protection.
- Proven ability to drive remediation, risk mitigation, control implementation, and audit readiness.
- Familiarity with GRC platforms such as TrustCloud, Archer, ServiceNow, ZenGRC, or equivalents.
- Excellent documentation, organization, and cross-functional collaboration skills, including experience coordinating external audits or internal testing cycles.
Top Skills
What the Team is Saying
What We Do
Coupa is a global technology company that helps businesses run smarter by connecting all the ways they spend money — from procurement and expenses to payments and supply chain decisions — in one intelligent platform. In simple terms, Coupa gives organizations the visibility and control they need to make better financial choices, reduce waste, and drive real impact. It’s where technology meets purpose: helping companies manage their resources more responsibly while creating a positive ripple across their people, partners, and the planet.
Why Work With Us
At Coupa, we prioritize an inclusive and empathetic workplace where every voice is valued. Our teams are proactive and accountable, ensuring we collaborate effectively to achieve our goals. The foundation of our culture rests on our people; we believe in fostering an environment that encourages innovation and curiosity.
Gallery
Coupa Offices
Remote Workspace
Employees work remotely.
Our virtual-first approach is intentional. It gives you the freedom to do your best work in a space that supports focus, balance, and creativity, while staying connected to a global team of changemakers who are redefining the future of business spend
