SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
OpenAI's Risk & Audit team is building an enterprise risk capability for a company operating at the frontier of AI. As Head of Enterprise Risk Management, you will lead the development of a modern ERM program and the technology platform that powers it, connecting risk strategy, governance, compliance, and assurance with high-quality data, automated workflows, continuous monitoring, and AI-enabled analysis.
This is a hands-on leadership role at the intersection of risk, operations, and technology. You will establish common risk language, governance, and decision processes while translating them into scalable systems, data products, and workflows. You will own enterprise risk assessments, maintain a centralized risk register, develop risk appetite and key risk indicators, and help leaders evaluate significant changes such as new products, markets, partnerships, major systems, and strategic investments.
Key responsibilities include:
- Design and evolve OpenAI's enterprise risk management framework, including risk taxonomy, governance standards, risk appetite, escalation thresholds, and mitigation expectations
- Lead enterprise risk assessments and maintain a centralized, decision-useful risk register reflecting strategic, financial, operational, technology, security, compliance, and emerging risks
- Establish key risk indicators, continuous-monitoring capabilities, and executive dashboards that translate complex data into clear signals, trends, and actions
- Enable risk-informed change governance for new products, markets, partnerships, acquisitions, major systems, and other high-impact initiatives
- Lead effective governance forums working cross-functionally with Compliance, Finance, Security, and others; prepare reporting for senior leadership and the Board
- Define strategy and roadmap for a modern ERM platform connecting with systems across the enterprise through reliable integrations and shared data models
- Apply automation, policy-as-code, data analytics, and AI-assisted workflows to evidence collection, control monitoring, issue management, risk analysis, and regulatory responses
- Coordinate risk activities across Finance, Security, Legal, Compliance, Engineering, Operations, and Internal Audit
- Build, coach, and lead a high-performing team; strengthen first-line ownership and foster a culture of practical risk management
The role is based in San Francisco with a hybrid work model of 3 days in the office per week. OpenAI offers relocation assistance to new employees.
QUALIFICATIONS:
- 12+ years of experience across enterprise or operational risk, compliance, internal audit, security governance, finance, or related fields, including significant experience leading ERM or GRC programs
- Track record of building or materially scaling an enterprise risk program in a fast-growing, technology-driven, or otherwise complex global organization
- Strong command of ERM and assurance practices, including risk appetite, risk assessments, KRIs, controls, issue management, and the three-lines model; familiarity with frameworks such as COSO or ISO/IEC 27001/27017/27018/27701/42001
- Experience advising executives and presenting risk information to senior governance bodies, with judgment to make complex tradeoffs clear and actionable
- Technical fluency with GRC platforms, data architecture, APIs, system integrations, cloud environments, and automated workflows; experience with infrastructure-as-code, CI/CD, or policy-as-code is a plus
- Experience using data analytics, automation, or AI-enabled tools to improve risk sensing, evidence analysis, control monitoring, and reporting
- Ability to connect strategic, financial, operational, technology, security, and compliance risks and work effectively across technical and non-technical teams
- Demonstrated success hiring, coaching, and developing multidisciplinary teams while operating effectively in ambiguity and at high velocity
- Relevant bachelor's degree or equivalent practical experience; credentials such as CIA, CPA, CISA, CRMA, CRM, or an advanced business, legal, or technical degree are valued
