GRC Program Lead: Audit & Controls Architect

OpenAI; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

OpenAI is seeking a technical, product-minded GRC builder who can own consequential audits and improve control and evidence systems. You will build a reusable control framework, validate scope, and leverage Codex to automate assurance work.

You will partner with engineers across cloud architecture, identity, logging, data flows, and governance teams to design maintainable tools that ensure evidence integrity and audit readiness while reducing repetitive requests.

Qualifications

• Direct ownership of audit or regulatory outcomes.
• Knowledge of control design, evidence, testing, and remediation.
• Fluent with cloud, identity, logging, data flows, and system boundaries.

Responsibilities

• Lead external, internal, customer, and certification audit work from scoping through evidence review, fieldwork, remediation, and closeout.
• Build a common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and applicable frameworks.
• Validate actual scope and ownership instead of assuming last year's controls, product boundaries, or evidence remain accurate.
• Use Codex to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting.
• Partner with engineers on cloud architecture, identity, logging, data flows, software changes, vulnerabilities, and control effectiveness.
• Design maintainable, permission-aware tools that preserve source provenance, human review, and evidence integrity.
• Reduce repeated requests and operational burden for control owners through measurable workflow improvements.
• Define roadmaps, decision rights, milestones, success metrics, and clear cross-functional escalations.

Skills

Audit governance

Security controls

Cloud architecture

Codex / AI-assisted tools

SQL

APIs

Data workflows

Cross-functional collaboration

Education

Bachelor’s degree in Computer Science or related field

Tools

Codex

SQL

APIs

Cloud platforms

Job description

OpenAI is seeking a technical, product-minded GRC builder who can own consequential audits and improve control and evidence systems. You will build a reusable control framework, validate scope, and leverage Codex to automate assurance work.

You will partner with engineers across cloud architecture, identity, logging, data flows, and governance teams to design maintainable tools that ensure evidence integrity and audit readiness while reducing repetitive requests.