GRC Program Manager, Audit & Controls

The role

You will lead external, internal, customer, and certification audit work and build a common control framework. You will use Codex to automate assurance work and partner with engineers on cloud architecture and system boundaries.

What you will do

• Lead external, internal, customer, and certification audit work from scoping through closeout.
• Build a common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and frameworks.
• Validate actual scope and ownership.
• Use Codex to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting.
• Partner with engineers on cloud architecture, identity, logging, data flows, software changes, vulnerabilities, and control effectiveness.
• Design maintainable, permission-aware tools.
• Reduce repeated requests and operational burden for control owners.
• Define roadmaps, decision rights, milestones, success metrics, and cross-functional escalations.

Required qualifications

• Direct ownership of meaningful audit, security, customer-assurance, or regulatory outcomes.
• Practical knowledge of control design, evidence, testing, operating effectiveness, and remediation.
• Technical fluency across cloud systems, identity, logging, APIs, data flows, and system boundaries.
• Ability to use Codex or comparable AI-assisted development tools to build, run, inspect, and test a working solution.
• Experience using code, SQL, APIs, structured data, automation, or data workflows to solve an operational problem.
• Ability to design reusable cross-framework controls.
• First-principles curiosity, creative problem solving, intellectual humility, and the ability to update when facts change.
• Product and program judgment.
• Clear, constructive partnership with Security, Engineering, Infrastructure, Product, Privacy, Legal, and audit teams.

Nice to have

• Frameworks such as SOC 2, ISO 27001/27017, PCI DSS, NIST, or FedRAMP

About the company

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. They seek to safely deploy AI through their products.