Compliance Program Manager — Regulatory Compliance

The posting, as OpenAI wrote it

About the team

Governance, Risk, and Compliance (GRC) builds compliance programs and provides assurance for OpenAI’s technology, people, and products. We combine technical understanding with practical operations to reduce risk, support product and research teams, and produce reliable evidence of how our controls work.

About the role

As a Regulatory Compliance Program Manager, you will build and operate programs that turn regulatory requirements into clear responsibilities, effective processes, and evidence that can withstand external scrutiny.

Your work will focus on AI safety/security and content moderation, with privacy operations as an adjacent area. You will partner with Legal and the teams that build and operate our products to scope the work, maintain accurate control narratives, prepare regulatory responses, and lead external assessments for your assigned portfolio.

You should be comfortable owning delivery, explaining tradeoffs, and changing your recommendation when the evidence changes. Success means controls have accountable owners, evidence stays current, and teams can respond accurately without repeatedly rebuilding the same work. The initial portfolio and expectations will be agreed with the hiring manager.

In this role, you will

• Lead an agreed portfolio of AI safety/security and content-compliance work, including programs associated with the EU AI Act, DSA, OSA, and SB 53, with Legal and relevant experts confirming applicable requirements.
• Translate requirements into scoped programs, operating processes, control and evidence responsibilities, milestones, and clear escalation paths.
• Build and maintain accurate control narratives and traceable evidence for regulatory requests, reporting, audits, and assessments.
• Lead preparation and delivery for external compliance assessments, coordinate the responsible teams, and track gaps through verified resolution or an explicitly owned decision.
• Prioritize the work that materially improves compliance outcomes and reduces risk; explain what should proceed, change, or wait and why.
• Develop evidence-backed recommendations with Legal, Product, Security, Safety, Integrity, Privacy, and other functional teams. Obtain decisions from the authorized owners for legal interpretation, external representations, and risk acceptance.
• Improve operational workflows for content and privacy compliance while keeping implementation and operation of controls with the appropriate functional owners.
• Simplify and automate repeated administrative work, test the results, and verify that the improvement is adopted and produces accurate, reliable outputs.
• Learn the GRC security-control environment and participate in the team’s on-call rotation, with scope and expectations explained during the hiring process.
• Communicate clearly, surface uncertainty early, incorporate feedback, and develop the domain knowledge needed for the next priority.

You might thrive in this role if
[…]
please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement https://cdn.openai.com/policies/eeo-policy-statement.pdf.

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.

To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA. No response will be provided to inquiries unrelated to job posting compliance.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241.

OpenAI Global Applicant Privacy Policy https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf

At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.