# GRC Program Manager, Assurance Engineering & Control Systems

**Company:** [OpenAI](https://hotfix.jobs/companies/openai)
**Location:** San Francisco, CA
**Role:** Technical Program Management
**Salary:** $216k – $252k/yr
**Skills:** GRC, Audit Management, Common Control Frameworks, SOC 2, ISO 27001, Pci Dss, Nist, FedRAMP, Cloud Systems, Identity And Access Management, SQL, APIs, Codex, Automation, Data Workflows
**Posted:** 2026-08-06

> Own audit programs and build reusable, technically grounded control and evidence systems. The role partners across security, engineering, infrastructure, product, privacy, legal, and audit teams to automate assurance work and reduce recurring operational burden.

## Job Description

## Responsibilities
- Lead external, internal, customer, and certification audit work from scoping through evidence review, fieldwork, remediation, and closeout.
- Build a common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and applicable frameworks.
- Validate actual scope and ownership rather than assuming prior controls, product boundaries, or evidence remain accurate.
- Use Codex to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting.
- Partner with engineers on cloud architecture, identity, logging, data flows, software changes, vulnerabilities, and control effectiveness.
- Design maintainable, permission-aware tools that preserve source provenance, human review, and evidence integrity.
- Reduce repeated requests and operational burden for control owners through measurable workflow improvements.
- Define roadmaps, decision rights, milestones, success metrics, and cross-functional escalations.

## Requirements
- Direct ownership of meaningful audit, security, customer-assurance, or regulatory outcomes.
- Practical knowledge of control design, evidence, testing, operating effectiveness, and remediation.
- Technical fluency across cloud systems, identity, logging, APIs, data flows, and system boundaries.
- Ability to use Codex or comparable AI-assisted development tools to build, run, inspect, and test a working solution.
- Experience using code, SQL, APIs, structured data, automation, or data workflows to solve operational problems.
- Ability to design reusable cross-framework controls without removing framework-specific testing and evidence requirements.
- First-principles curiosity, creative problem solving, intellectual humility, and adaptability when facts change.
- Product and program judgment, including defining users, scope, milestones, ownership, adoption, and measurable outcomes.
- Clear, constructive partnership with Security, Engineering, Infrastructure, Product, Privacy, Legal, and audit teams.

## Nice-to-haves
- Familiarity with SOC 2, ISO 27001/27017, PCI DSS, NIST, or FedRAMP.
- A specific degree or certification is not required.

## Compensation
- Annual salary: $216,000–$252,000.

## Similar jobs

- [GRC Program Manager, Product and Customer Trust](https://hotfix.jobs/jobs/6fca7a94-a8a0-47ea-b974-81a67557d0e7) - OpenAI - San Francisco, CA - $216k – $240k/yr
- [NPI TPM, Product Engineering](https://hotfix.jobs/jobs/901a73c1-a2c7-4deb-a92e-6eefedc5a4c9) - Fluidstack - New York, NY - $208k – $263k/yr
- [Technical Program Manager, Foundations Data and Operations](https://hotfix.jobs/jobs/295bd771-d286-41b8-8050-efe6b9d7509b) - OpenAI - San Francisco, CA - $207k – $285k/yr
- [Technical Program Manager, Partnerships](https://hotfix.jobs/jobs/6488feb4-d687-47e0-94d2-5210a2ae3105) - OpenAI - San Francisco, CA - $207k – $230k/yr
- [Technical Program Manager, Sensors](https://hotfix.jobs/jobs/120f93a6-1fd5-4118-8601-6c91da43fd90) - OpenAI - San Francisco, CA - $207k – $285k/yr

**Apply:** https://hotfix.jobs/jobs/7dee7398-2986-4413-9c5a-97cc67a98e86
**Canonical:** https://hotfix.jobs/jobs/7dee7398-2986-4413-9c5a-97cc67a98e86