Compliance Program Manager — Regulatory Compliance

About this role

About the team

Governance, Risk, and Compliance (GRC) builds compliance programs and provides assurance for OpenAI’s technology, people, and products. We combine technical understanding with practical operations to reduce risk, support product and research teams, and produce reliable evidence of how our controls work.

About the role

As a Regulatory Compliance Program Manager, you will build and operate programs that turn regulatory requirements into clear responsibilities, effective processes, and evidence that can withstand external scrutiny.

Your work will focus on AI safety/security and content moderation, with privacy operations as an adjacent area. You will partner with Legal and the teams that build and operate our products to scope the work, maintain accurate control narratives, prepare regulatory responses, and lead external assessments for your assigned portfolio.

You should be comfortable owning delivery, explaining tradeoffs, and changing your recommendation when the evidence changes. Success means controls have accountable owners, evidence stays current, and teams can respond accurately without repeatedly rebuilding the same work. The initial portfolio and expectations will be agreed with the hiring manager.

In this role, you will:

• Lead an agreed portfolio of AI safety/security and content-compliance work, including programs associated with the EU AI Act, DSA, OSA, and SB 53, with Legal and relevant experts confirming applicable requirements.

• Translate requirements into scoped programs, operating processes, control and evidence responsibilities, milestones, and clear escalation paths.

• Build and maintain accurate control narratives and traceable evidence for regulatory requests, reporting, audits, and assessments.

• Lead preparation and delivery for external compliance assessments, coordinate the responsible teams, and track gaps through verified resolution or an explicitly owned decision.