GRC Program Lead: Assurance Engineering & Controls

OpenAI; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

OpenAI is hiring a technical GRC builder to own audits, improve control and evidence systems, and streamline assurance processes. You will develop a reusable control framework, validate scope and ownership, and use Codex to automate checks and mappings.

Collaborating with engineers on cloud architecture, identity, logging, data flows, and remediation, you will create maintainable, provenance-aware tools to reduce audit friction and enable faster compliance outcomes.

Qualifications

• Direct ownership of audit, security, or regulatory outcomes.
• Practical knowledge of control design, evidence, testing, and remediation.
• Technical fluency across cloud systems, identities, logging, data flows, and system boundaries.
• Ability to use Codex or similar AI-assisted tools to build and test solutions.
• Experience using code, APIs, data workflows to solve operational problems.

Responsibilities

• Lead external, internal, customer, and certification audit work from scoping through evidence review.
• Build a common control framework linking risk, controls, ownership, and evidence.
• Validate scope and ownership; avoid stale controls or evidence.
• Use Codex to build evidence checks, control mappings, and remediation reporting.
• Collaborate with engineers on cloud architecture, data flows, and security controls.
• Design reusable, cross-framework controls preserving test and evidence needs.

Skills

Audit ownership

Control design

Evidence testing

Cloud & identity security

APIs & data flows

Codex / AI tooling

Automation & workflows

Tools

Codex

Job description

OpenAI is hiring a technical GRC builder to own audits, improve control and evidence systems, and streamline assurance processes. You will develop a reusable control framework, validate scope and ownership, and use Codex to automate checks and mappings.

Collaborating with engineers on cloud architecture, identity, logging, data flows, and remediation, you will create maintainable, provenance-aware tools to reduce audit friction and enable faster compliance outcomes.