GRC Program Lead: Assurance Engineering & Controls

OpenAI; San Francisco (CA); On-site; USD 160,000 - 260,000; Full time

Job summary

OpenAI is seeking a technical, product-minded GRC builder to own audits and strengthen the control framework across our systems. You will build a reusable framework, validate scope, and use Codex to automate assurance checks, while partnering with engineers and product teams to improve evidence and processes.

You will lead audit work from scoping through evidence review, remediation, and closeout, designing maintainable tools that preserve provenance and enable scalable compliance across cloud,

Qualifications

• Must own meaningful audit, security, or regulatory outcomes.
• Knowledge of control design, evidence, testing, operating effectiveness, and remediation.
• Technical fluency across cloud systems, identity, logging, data flows, and system boundaries.
• Experience using code/automation to solve operational problems.

Responsibilities

• Lead external, internal, customer, and certification audit work from scoping through evidence review, fieldwork, remediation, and closeout.
• Build a common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and applicable frameworks.
• Validate actual scope and ownership instead of assuming prior year controls or evidence remain accurate.
• Use Codex to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting.
• Partner with engineers on cloud architecture, identity, logging, data flows, software changes, vulnerabilities, and control effectiveness.
• Design maintainable, permission-aware tools that preserve source provenance, human review, and evidence integrity.
• Reduce repeated requests and operational burden for control owners through measurable workflow improvements.
• Define roadmaps, decision rights, milestones, success metrics, and clear cross-functional escalations.

Skills

Audit management

Risk assessment

Cloud architecture knowledge

Codex/AI tooling

Data workflows

Cross-functional partnership

Education

Degree in Computer Science / related field

Tools

Codex

SQL

APIs

Job description

OpenAI is seeking a technical, product-minded GRC builder to own audits and strengthen the control framework across our systems. You will build a reusable framework, validate scope, and use Codex to automate assurance checks, while partnering with engineers and product teams to improve evidence and processes.

You will lead audit work from scoping through evidence review, remediation, and closeout, designing maintainable tools that preserve provenance and enable scalable compliance across cloud,