SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
OpenAI's Governance, Risk, and Compliance (GRC) team is seeking a Regulatory Compliance Program Manager to build and operate compliance programs that translate regulatory requirements into clear responsibilities, effective processes, and auditable evidence.
You will own an agreed portfolio of AI safety/security and content-moderation compliance work, with a focus on regulations including the EU AI Act, DSA (Digital Services Act), OSA (Online Safety Act), and SB 53. Working closely with Legal and product/research teams, you will scope compliance work, maintain control narratives, prepare regulatory responses, and lead external assessments.
Key responsibilities include:
- Leading assigned compliance portfolios and translating regulatory requirements into scoped programs, operating processes, control responsibilities, and milestones
- Building and maintaining accurate control narratives and traceable evidence for regulatory requests, reporting, audits, and assessments
- Leading preparation and delivery for external compliance assessments, coordinating responsible teams, and tracking gaps to resolution
- Developing evidence-backed recommendations with Legal, Product, Security, Safety, Integrity, and Privacy teams; obtaining decisions from authorized owners
- Improving operational workflows for content and privacy compliance while keeping control implementation with appropriate functional owners
- Simplifying and automating repeated administrative work, testing results, and verifying adoption and accuracy
- Participating in the GRC team's on-call rotation for security-control environment support
- Communicating clearly with technical teams, Legal, leadership, and external stakeholders about evidence, uncertainty, recommendations, and tradeoffs
You will thrive in this role if you have:
- Practical experience building and operating AI safety/security and content-moderation compliance programs, with ability to explain your decisions, contributions, and results
- Experience using agentic tooling to automate and improve scaled processes
- Understanding of technical concepts across model evaluation, training, release, safety controls, content moderation, and post-launch operations
- Strong understanding of AI safety, content, and privacy requirements (EU AI Act, DSA, OSA, SB 53) and experience translating them into operating processes with domain experts and Legal
- Experience leading regulatory responses and external compliance audits, distinguishing supported claims from evidence gaps
- Track record delivering complex cross-functional programs, scoping practical first increments, and adapting priorities under constraints
- Experience improving or automating operational workflows and verifying accuracy, usefulness, and ongoing ownership
- Ability to maintain precise records, navigate technical/compliance documentation and contract language, follow through on commitments, and judge what to resolve or escalate
- Strong written and verbal communication skills with technical teams, Legal, leadership, and external stakeholders
- Ability to work constructively through disagreement, learn from feedback, and take responsibility for outcomes
- Privacy program-management experience is a plus
