Senior GRC Manager: AI Compliance & Security

OpenRouter, Inc; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

OpenRouter, Inc. seeks a hands-on GRC/compliance leader to own and advance our controls program. You will drive evidence collection, audits, training, and policy implementation across the company, coordinating with HR, Legal, Finance, and Engineering to embed compliance into fast-moving product and security work.

You will translate evolving AI regulation into actionable controls, lead cross-functional efforts, and maintain readiness for SOC 2, HIPAA, PCI DSS, GDPR, CCPA, and related standards.

Qualifications

• Several years in GRC or compliance, hands-on — built and run programs.
• At least one SOC 2 audit cycle owned end to end.
• Fluent with compliance automation platforms (Drata preferred).
• Technical enough to discuss architecture and data flows with engineers.

Responsibilities

• Own Drata end to end — administration, integrations, monitoring health and evidence collection automation.
• Curate the SafeBase knowledge base for sales to self-serve security questionnaires.

Skills

GRC/compliance

Cross-functional influence

Compliance automation

Audit readiness

Tools

Drata

SafeBase

Job description

OpenRouter, Inc. seeks a hands-on GRC/compliance leader to own and advance our controls program. You will drive evidence collection, audits, training, and policy implementation across the company, coordinating with HR, Legal, Finance, and Engineering to embed compliance into fast-moving product and security work.

You will translate evolving AI regulation into actionable controls, lead cross-functional efforts, and maintain readiness for SOC 2, HIPAA, PCI DSS, GDPR, CCPA, and related standards.