GRC Program Manager: Audit & Controls Architect

OpenAI; California (MO); On-site; USD 160,000 - 210,000; Full time

Job summary

OpenAI’s Governance, Risk, and Compliance team seeks a technical, product-minded GRC builder who can own consequential audits and improve control systems. You will develop a reusable common control framework, validate scope and ownership, and automate assurance with Codex.

Collaboration with Security, Engineering, Product, Privacy, and Legal will be essential to reduce audit friction and strengthen evidence reliability.

Qualifications

• Direct ownership of audit/security outcomes.
• Practical knowledge of control design and remediation.
• Technical fluency across cloud systems, identity, logging, and data flows.
• Ability to use AI-assisted development tools to build working solutions.
• Experience using code, SQL, APIs, automation, or data workflows.

Responsibilities

• Lead external, internal, customer, and certification audits from scoping through evidence review, fieldwork, remediation, and closeout.
• Build a common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and applicable frameworks.
• Validate actual scope and ownership instead of assuming last year's controls or evidence.
• Use Codex to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting.
• Partner with engineers on cloud architecture, identity, logging, data flows, software changes, vulnerabilities, and control effectiveness.
• Design maintainable, permission-aware tools preserving source provenance, human review, and evidence integrity.
• Reduce repeated requests and operational burden for control owners through measurable workflow improvements.
• Define roadmaps, decision rights, milestones, success metrics, and clear cross-functional escalations.

Skills

Audit ownership

Cloud security

APIs & data flows

Codex tools

Automation workflows

Cross-framework controls

Security collaboration

Security frameworks

Tools

Codex

Job description

OpenAI’s Governance, Risk, and Compliance team seeks a technical, product-minded GRC builder who can own consequential audits and improve control systems. You will develop a reusable common control framework, validate scope and ownership, and automate assurance with Codex.

Collaboration with Security, Engineering, Product, Privacy, and Legal will be essential to reduce audit friction and strengthen evidence reliability.