Head of Enterprise Risk Management (AI)

Location: San Francisco, United States; hybrid work model with 3 days in the office per week. Relocation assistance is available to new employees.

Salary: $216K–$295K base pay, plus equity and performance-related bonuses for eligible employees.

Company

OpenAI is an AI research and deployment company developing products intended to ensure that general-purpose artificial intelligence benefits humanity.

What you will do

• Design and evolve the enterprise risk management framework, including risk taxonomy, governance standards, risk appetite, escalation thresholds, and mitigation expectations.
• Lead enterprise risk assessments and maintain a centralized risk register covering strategic, financial, operational, technology, security, compliance, and emerging risks.
• Establish key risk indicators, continuous-monitoring capabilities, and executive dashboards that convert complex data into signals, trends, and actions.
• Enable risk-informed governance for new products, markets, partnerships, acquisitions, major systems, and other high-impact initiatives.
• Define the strategy and roadmap for an ERM platform integrating identity, finance, HR, ticketing, code, and other enterprise systems through shared data models.
• Coordinate risk activities across Finance, Security, Legal, Compliance, Engineering, Operations, and Internal Audit; build and lead a multidisciplinary team and report to senior leadership and the Board.

Requirements

• 12+ years of experience across enterprise or operational risk, compliance, internal audit, security governance, finance, or related fields, including significant experience leading ERM or GRC programs.
• Experience building or materially scaling an enterprise risk program in a fast-growing, technology-driven, or otherwise complex global organization.
• Strong command of ERM and assurance practices, including risk appetite, risk assessments, KRIs, controls, issue management, and the three-lines model; familiarity with COSO or ISO/IEC 27001, 27017, 27018, 27701, or 42001.
• Experience advising executives and presenting risk information to senior governance bodies, with sound judgment in making complex tradeoffs clear and actionable.
• Technical fluency with GRC platforms, data architecture, APIs, system integrations, cloud environments, and automated workflows.
• Experience using data analytics, automation, or AI-enabled tools for risk sensing, evidence analysis, control monitoring, and reporting.
• Ability to connect strategic, financial, operational, technology, security, and compliance risks and work effectively with technical and non-technical teams.
• Demonstrated success hiring, coaching, and developing multidisciplinary teams while operating effectively in ambiguity and at high velocity.
• A relevant bachelor's degree or equivalent practical experience.

Nice to have

• Experience with infrastructure-as-code, CI/CD, or policy-as-code.
• Credentials such as CIA, CPA, CISA, CRMA, or CRM.
• An advanced business, legal, or technical degree.

Culture & Benefits

• Hybrid work with three office days per week and relocation support for eligible employees.
• Medical, dental, and vision insurance, including employer contributions to Health Savings Accounts.
• 401(k) plan with employer match, paid parental and medical leave, paid time off, paid holidays, and sick or safe time.
• Mental health and wellness support, life and disability coverage, and an annual learning and development stipend.
• Daily office meals, eligible meal delivery credits, commuter benefits, charitable donation matching, and wellness stipends may be available.

Hiring process

• More detailed benefits information is provided during the hiring process.
• Background checks are administered in accordance with applicable law.