GRC Program Manager, Product Lifecycle Assurance
Remote • San Francisco • FullTime
Posted 13d ago
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
OpenAI is seeking an experienced Product Lifecycle Assurance Individual Contributor to scale its Governance, Risk, and Compliance (GRC) function across its product stack. This role is crucial for ensuring products meet customer and regulatory compliance requirements at launch, and for promptly detecting and correcting any regressions. You will partner closely with Product, Security, Legal, and Privacy teams to maintain OpenAI's security, privacy, and compliance claims, providing assurance to customers, auditors, and regulators regarding user data handling. The position involves end-to-end product assurance, from inception through continuous post-launch monitoring, enhancing and building components for a comprehensive program. This is a highly cross-functional and technical operations role focused on ensuring products meet compliance standards at launch, preventing regressions, and evidencing compliance state, rather than supporting traditional audits.
Responsibilities
- Manage the end-to-end operation of OpenAI's product assurance program from development to post-launch monitoring.
- Own the GRC product assurance program, providing governance over safety, deployment, security, and legal reviews.
- Drive cross-functional collaboration and accountability for the product assurance program.
- Build scalable controls and low-friction processes within the infrastructure stack, developer workflows, and launch tooling.
- Ensure teams have the necessary guidance for safe product design and launch.
- Verify compliance, security, and privacy claims map to verifiable controls.
- Align the product lifecycle assurance program with organizational objectives and influence roadmaps.
- Apply sound judgment in launch reviews, technical assurance trade-offs, and risk posture management.
Requirements
- Strong technical experience in product lifecycle assurance, security, and privacy compliance within high-velocity, low-friction development environments.
- Experience building technical controls, metrics, monitoring tools, CI/CD tooling, and risk dashboards.
- Ability to run an end-to-end, cross-functional product assurance program, applying judgment to determine appropriate processes and controls.
- Capacity to shift product assurance 'left' in the development cycle with just-in-time controls, guidance, and guardrails.
- Low-ego, outcome-oriented mindset focused on achieving product assurance goals.
- Strong technical cross-functional leadership skills, influencing and aligning partner teams.
- Comfort working with complex system architectures (e.g., Kubernetes) and data flows.
- Experience working with Privacy engineering and Data Science to understand data maps and database schemas.
- Ability to exercise sound judgment in high-stakes decisions related to product launch risk and controls.