GRC Manager
AI model gateway and marketplace offering a unified API to access, route, and manage models from multiple providers.
Maintainer signals as of 9/25/2026
Funding history
Projects
About OpenRouter
OpenRouter provides developers and businesses with a single, OpenAI-compatible API for hundreds of AI models. It supports provider failover, routing for price, latency and reliability, plus enterprise controls and observability.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will operate the day-to-day compliance program, administer Drata, and maintain the SafeBase knowledge base. You will collect evidence, drive compliance training, lead access reviews and risk assessments, maintain audit readiness, address product compliance questions, and turn emerging AI regulations into practical operating controls.
Requirements
- Hands-on GRC or compliance experience building and operating programs
- Experience owning at least one SOC 2 audit cycle end to end
- Administration experience with a compliance automation platform
- Technical knowledge of architecture and data flows
- Cross-functional influence
- Ability to work with changing requirements and limited precedent
Responsibilities
- Own Drata administration, integrations, test-health monitoring, and manual evidence collection
- Curate the SafeBase knowledge base and escalate customer security questionnaires
- Drive policy acknowledgments, device compliance, and recurring security and compliance training
- Lead user access reviews, penetration tests, BCDR and incident-response tabletops, policy reviews, and risk assessments
- Work with Engineering on data handling and customer compliance commitments
- Maintain audit readiness for SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act
- Translate emerging AI regulation into operational controls
- Partner with HR, Legal, Customer Support, and Finance on compliance processes
Benefits
- Equity