The opportunity
Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. We’re excited about building creative solutions to ambiguous security requirements and delivering new technologies to mission critical customers.
What you'll do
Proven experience in obtaining and maintaining a FedRAMP ATO and agency: specific ATOs in highly restricted environments, within government or regulated sectors.
A deep understanding of USG security frameworks and policies (e.g., NIST, RMF, FedRAMP).
Ability to communicate technical concepts to diverse audiences, including: engineers and non-technical stakeholders.
Exceptional technical program management skills, with the ability to: multitask and deliver large complex programs under pressure.
Drive the ATO process for FedRAMP and across multiple government clients in: restricted environments with minimal oversight.
Collaborate with engineering teams to interpret security requirements and: implement controls that balance compliance with operational needs.
What they're looking for
- Create clear, concise, and technically accurate documentation, including: System Security Plans (SSPs), risk assessments, and architecture diagrams.
- Act as a subject matter expert during audits and assessments, representing: the organization with credibility and expertise.
- Continuously refine processes to improve the efficiency and quality of compliance efforts.
- An active US security clearance.
