GRC Program Manager: Audit, Controls & Automation

OpenAI; United States; Remote; USD 130,000 - 170,000; Full time

Job summary

OpenAI is seeking a technical, product-minded GRC builder to own consequential audits and strengthen the control and evidence systems that support them.

You will create a reusable common control framework, leverage Codex to automate assurance tasks, and validate system scope and ownership. The role emphasizes questioning assumptions, solving novel problems with engineers, and reducing audit friction through better underlying systems.

Qualifications

• Lead external, internal, customer, and certification audits from scoping to closeout.
• Build a common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and frameworks.
• Validate scope and ownership instead of assuming last year's controls or evidence.
• Use Codex to build and test evidence checks, control mappings, and remediation reporting.
• Partner with engineers on cloud architecture, identity, logging, data flows, and vulnerabilities.

Responsibilities

• Lead audit work end-to-end across multiple stakeholders.
• Develop and maintain a reusable control framework for assurance.
• Improve evidence collection and owner workflows to reduce frictions.
• Collaborate with product and engineering teams to ensure control effectiveness.

Skills

Audit leadership

GRC framework design

Cross-functional collaboration

Automation with Codex

Tools

Codex

Cloud architecture

Job description

OpenAI is seeking a technical, product-minded GRC builder to own consequential audits and strengthen the control and evidence systems that support them.

You will create a reusable common control framework, leverage Codex to automate assurance tasks, and validate system scope and ownership. The role emphasizes questioning assumptions, solving novel problems with engineers, and reducing audit friction through better underlying systems.