GRC Program Manager Audit and Controls
AI research and deployment company building and deploying frontier AI products, including ChatGPT, Codex, and its API platform.
Projects
About OpenAI
OpenAI’s mission is to ensure artificial general intelligence benefits all of humanity. It consists of the nonprofit OpenAI Foundation and OpenAI Group, a public benefit corporation governed by the Foundation.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead audits from scoping through closeout and build reusable controls and evidence systems. You will validate system scope and ownership, use AI-assisted tools to automate assurance workflows, partner with technical stakeholders, and improve control-owner workflows, roadmaps, metrics, and remediation reporting.
Requirements
- Experience owning audit, security, customer-assurance, or regulatory outcomes
- Knowledge of control design, evidence, testing, operating effectiveness, and remediation
- Technical fluency in cloud systems, identity, logging, APIs, data flows, and system boundaries
- Ability to use Codex or comparable AI-assisted development tools
- Experience with code, SQL, APIs, structured data, automation, or data workflows
- Experience designing reusable cross-framework controls
- Product and program management skills
- Knowledge of SOC 2, ISO 27001/27017, PCI DSS, NIST, or FedRAMP
Responsibilities
- Lead external, internal, customer, and certification audits from scoping through closeout
- Build a common control framework
- Validate system scope, ownership, controls, product boundaries, and evidence
- Build and test assurance automation, evidence checks, control mappings, and monitoring
- Partner with engineers on cloud architecture, identity, logging, data flows, vulnerabilities, and controls
- Design permission-aware tools that preserve provenance, review, and evidence integrity
- Reduce operational burden for control owners
- Define roadmaps, decision rights, milestones, metrics, and escalations
Benefits
- Medical, dental, and vision insurance
- Health Savings Account employer contributions
- Health FSA, Dependent Care FSA, and commuter pre-tax accounts
- 401(k) retirement plan with employer match
- Paid parental, medical, and caregiver leave
- Flexible PTO or up to 15 days annually depending on employee classification
- Paid company holidays, office closures, and sick or safe time
- Mental health and wellness support
- Employer-paid basic life and disability coverage
- Annual learning and development stipend
- Daily office meals and eligible meal delivery credits
- Relocation support for eligible employees
- Charitable donation matching and wellness stipends may be provided