Federal GRC Program Leader (FedRAMP/ATO)

Heelsandtech; Washington, Northern (District of Columbia, KY); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

OpenAI is seeking a GRC Program Manager to lead US government compliance initiatives, drive FedRAMP ATOs, and coordinate with engineers and assessors in a highly regulated environment. Based in Washington, DC with hybrid work.

You will design and implement security controls, produce SSPs and risk assessments, and represent OpenAI during audits, while navigating complex regulations to maintain strong stakeholder trust.

Qualifications

• FedRAMP and agency ATO experience in government or regulated sectors.
• Understanding of USG security frameworks (NIST, RMF, FedRAMP).
• Ability to communicate technical concepts to engineers and non-technical stakeholders.
• Excellent technical program management skills, able to manage large complex programs under pressure.

Responsibilities

• Drive the ATO process for FedRAMP and across multiple government clients.
• Collaborate with engineering teams to interpret requirements and implement controls.
• Create documentation including System Security Plans (SSPs), risk assessments, and architecture diagrams.
• Act as a subject matter expert during audits and assessments.
• Continuously refine processes to improve efficiency and quality of compliance efforts.

Skills

FedRAMP ATO experience

USG security frameworks

Program management

Communication to diverse audiences

Security controls design

Cross-functional collaboration

Tools

Kubernetes

Terraform

Azure

AWS

Job description

OpenAI is seeking a GRC Program Manager to lead US government compliance initiatives, drive FedRAMP ATOs, and coordinate with engineers and assessors in a highly regulated environment. Based in Washington, DC with hybrid work.

You will design and implement security controls, produce SSPs and risk assessments, and represent OpenAI during audits, while navigating complex regulations to maintain strong stakeholder trust.