Description
Compensation
The base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The salary range for this position is $216K – $240K, with generous equity, performance-related bonuses, and the following benefits:
- Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
- Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
- 401(k) retirement plan with employer match
- Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
- Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
- 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
- Mental health and wellness support
- Employer-paid basic life and disability coverage
- Annual learning and development stipend to fuel your professional growth
- Daily meals in our offices, and meal delivery credits as eligible
- Relocation support for eligible employees
- Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided.
About the team
Governance, Risk, and Compliance (GRC) builds compliance programs and provides assurance for OpenAI’s technology, people, and products. We combine technical understanding with practical operations to reduce risk, support product and research teams, and produce reliable evidence of how our controls work.
About the role
As a Regulatory Compliance Program Manager, you will build and operate programs that turn regulatory requirements into clear responsibilities, effective processes, and evidence that can withstand external scrutiny. Your work will focus on AI safety/security and content moderation, with privacy operations as an adjacent area. You will partner with Legal and the teams that build and operate our products to scope the work, maintain accurate control narratives, prepare regulatory responses, and lead external assessments for your assigned portfolio.
Responsibilities
- Lead an agreed portfolio of AI safety/security and content-compliance work, including programs associated with the EU AI Act, DSA, OSA, and SB 53, with Legal and relevant experts confirming applicable requirements.
- Translate requirements into scoped programs, operating processes, control and evidence responsibilities, milestones, and clear escalation paths.
- Build and maintain accurate control narratives and traceable evidence for regulatory requests, reporting, audits, and assessments.
- Lead preparation and delivery for external compliance assessments, coordinate the responsible teams, and track gaps through verified resolution or an explicitly owned decision.
- Prioritize the work that materially improves compliance outcomes and reduces risk; explain what should proceed, change, or wait and why.
- Develop evidence-backed recommendations with Legal, Product, Security, Safety, Integrity, Privacy, and other functional teams. Obtain decisions from the authorized owners for legal interpretation, external representations, and risk acceptance.
- Improve operational workflows for content and privacy compliance while keeping implementation and operation of controls with the appropriate functional owners.
- Simplify and automate repeated administrative work, test the results, and verify that the improvement is adopted and produces accurate, reliable outputs.
- Learn the GRC security-control environment and participate in the team’s on-call rotation, with scope and expectations explained during the hiring process.
- Communicate clearly, surface uncertainty early, incorporate feedback, and develop the domain knowledge needed for the next priority.
Requirements
- Practical experience building and operating AI safety/security and content-moderation programs, and can explain your own decisions, contribution, and results.
- Experience using agentic tooling to automate and improve scaled processes.
- Understanding of relevant technical concepts across model evaluation, training and release, safety controls, content moderation, and post-launch operations, and can explain where specialist input is needed.
- Strong understanding of relevant AI safety, content, and privacy requirements, including the EU AI Act, DSA, OSA, and SB 53, and experience translating them into operating processes and controls with domain experts and Legal.
- Experience leading regulatory responses and external compliance audits, and can distinguish supported claims from evidence gaps.
- Delivered complex cross-functional programs, scoped practical first increments, and adapted priorities when constraints changed.
- Improved or automated an operational workflow and verified its accuracy, usefulness, and ongoing ownership.
- Maintains precise records, navigates technical/compliance documentation and contract language, follows through on commitments, and judges what to resolve directly or escalate.
- Communicates clearly in writing and conversation with technical teams, Legal, leadership, and external stakeholders; explains evidence, uncertainty, recommendations, and tradeoffs.
- Works constructively through disagreement, learns from feedback, and takes responsibility for outcomes.