OpenAI
Head of Enterprise Risk Management
$216K–$295K
San Francisco · Hybrid · Director · Full-time · Posted Oct 23, 2026
- Experience
- 12+ years; includes significant experience leading ERM or GRC programs.
- Education
- Relevant bachelor’s degree or equivalent practical experience.
About the job
Build and lead OpenAI’s enterprise risk management program and supporting platform, including risk governance, assessments, monitoring, and executive reporting.
What you'll do
- Develop the ERM framework, risk appetite, governance standards, and centralized risk register.
- Set the roadmap for the ERM platform, integrations, dashboards, and automated monitoring workflows.
- Coordinate risk and assurance activities across teams, advise leadership, and build risk culture and team capability.
What they ask for
- 12+ years of experience in enterprise or operational risk, compliance, internal audit, security governance, finance, or related fields, including significant ERM or GRC program leadership.
- Track record building or materially scaling an enterprise risk program in a complex organization.
- Strong command of ERM and assurance practices, including risk appetite, assessments, KRIs, controls, issue management, and the three-lines model.
- Relevant bachelor’s degree or equivalent practical experience.
Nice to have
- Familiarity with COSO or ISO/IEC 27001/27017/27018/27701/42001.
- Credentials such as CIA, CPA, CISA, CRMA, CRM, or an advanced business, legal, or technical degree; infrastructure-as-code, CI/CD, or policy-as-code experience is a plus.
Pay
$216K – $295K USD base salary
Tools
GRC platforms, APIs, cloud environments, infrastructure-as-code, CI/CD, policy-as-code
AI focus
Use AI-enabled tools and workflows for emerging-risk sensing, analysis, evidence review, control monitoring, and reporting.
Model-written summary · the original posting is authoritative