The opportunity
The OpenAI Risk & Audit team is building an enterprise risk capability for a company operating at the frontier of AI. We help leaders identify, understand, and manage the risks that matter most while enabling responsible innovation and durable growth.
What you'll do
Design and evolve OpenAI’s enterprise risk management framework, including: risk taxonomy, governance standards, risk appetite, escalation thresholds, and mitigation expectations.
Lead enterprise risk assessments and maintain a centralized, decision-useful: risk register that reflects strategic, financial, operational, technology, security, compliance, and emerging risks.
Establish key risk indicators, continuous-monitoring capabilities, and: executive dashboards that translate complex data into clear signals, trends, and actions.
Enable risk-informed change governance for new products, markets,: partnerships, acquisitions, major systems, and other high-impact initiatives.
Lead effective governance forums working cross-functionally with key partners: such as Compliance, Finance, Security and others, and prepare concise reporting for senior leadership and the Board.
Define the strategy and roadmap for a modern ERM platform that will connect: with systems across the enterprise including identity, finance, HR, ticketing, code, and others through reliable integrations and shared data models.
What they're looking for
- Apply automation, policy-as-code, data analytics, and AI-assisted workflows: to evidence collection, control monitoring, issue management, risk analysis, and audit or regulatory responses.
- Coordinate risk activities across Finance, Security, Legal, Compliance,: Engineering, Operations, and Internal Audit, clarifying ownership and reducing duplication across the three lines of defense.
- Build, coach, and lead a high-performing team, strengthen first-line: ownership, and foster a culture of practical risk management, curiosity, accountability, and continuous improvement.
- + years of experience across enterprise or operational risk, compliance,: internal audit, security governance, finance, or related fields, including significant experience leading ERM or GRC programs.
