Compliance Program Manager — Regulatory Compliance

Details

About the Team

Governance, Risk, and Compliance (GRC) builds compliance programs and provides assurance for OpenAI’s technology, people, and products. The team combines technical understanding with practical operations to reduce risk, support product and research teams, and produce reliable evidence of how controls work.

About the Role

As a Regulatory Compliance Program Manager, you will build and operate programs that turn regulatory requirements into clear responsibilities, effective processes, and evidence that can withstand external scrutiny.

Your work will focus on AI safety/security and content moderation, with privacy operations as an adjacent area. You will partner with Legal and the teams that build and operate products to scope the work, maintain accurate control narratives, prepare regulatory responses, and lead external assessments for your assigned portfolio.

Success means controls have accountable owners, evidence stays current, and teams can respond accurately without repeatedly rebuilding the same work. The initial portfolio and expectations will be agreed with the hiring manager.

Responsibilities

• Lead an agreed portfolio of AI safety/security and content-compliance work, including programs associated with the EU AI Act, DSA, OSA, and SB 53, with Legal and relevant experts confirming applicable requirements.
• Translate requirements into scoped programs, operating processes, control and evidence responsibilities, milestones, and clear escalation paths.
• Build and maintain accurate control narratives and traceable evidence for regulatory requests, reporting, audits, and assessments.
• Lead preparation and delivery for external compliance assessments, coordinate responsible teams, and track gaps through verified resolution or an explicitly owned decision.
• Prioritize work that materially improves compliance outcomes and reduces risk; explain what should proceed, change, or wait and why.
• Develop evidence-backed recommendations with Legal, Product, Security, Safety, Integrity, Privacy, and other functional teams.
• Obtain decisions from authorized owners for legal interpretation, external representations, and risk acceptance.
• Improve operational workflows for content and privacy compliance while keeping implementation and operation of controls with the appropriate functional owners.
• Simplify and automate repeated administrative work, test the results, and verify that improvements are adopted and produce accurate, reliable outputs.
• Learn the GRC security-control environment and participate in the team’s on-call rotation, with scope and expectations explained during the hiring process.
• Communicate clearly, surface uncertainty early, incorporate feedback, and develop the domain knowledge needed for the next priority.

Requirements

• Practical experience building and operating AI safety/security and content-moderation programs, with the ability to explain your decisions, contributions, and results.
• Experience using agentic tooling to automate and improve processes at scale.
• Understanding of technical concepts across model evaluation, training and release, safety controls, content moderation, and post-launch operations.
• Strong understanding of relevant AI safety, content, and privacy requirements, including the EU AI Act, DSA, OSA, and SB 53.
• Experience translating regulatory requirements into operating processes and controls with domain experts and Legal.
• Experience leading regulatory responses and external compliance audits, and distinguishing supported claims from evidence gaps.
• Experience delivering complex cross-functional programs, scoping practical first increments, and adapting priorities when constraints change.
• Experience improving or automating operational workflows and verifying their accuracy, usefulness, and ongoing ownership.
• Ability to maintain precise records, navigate technical and compliance documentation and contract language, follow through on commitments, and determine what to resolve directly or escalate.
• Clear written and verbal communication skills with technical teams, Legal, leadership, and external stakeholders.
• Ability to explain evidence, uncertainty, recommendations, and tradeoffs; work constructively through disagreement; learn from feedback; and take responsibility for outcomes.
• Privacy program-management experience is a plus.

Benefits

• Base salary of $216,000–$240,000 per year, plus equity.
• Medical, dental, and vision insurance for employees and their families, with employer contributions to Health Savings Accounts.
• Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses.
• 401(k) retirement plan with employer match.
• Paid parental leave, medical leave, and caregiver leave.
• Paid time off, paid company holidays, office closures, and paid sick or safe time as required by applicable law.
• Mental health and wellness support.
• Employer-paid basic life and disability coverage.
• Annual learning and development stipend.
• Daily meals in offices and meal delivery credits as eligible.
• Relocation support for eligible employees.
• Additional taxable fringe benefits may include charitable donation matching and wellness stipends.

OpenAI is an equal opportunity employer and provides reasonable accommodations to applicants with disabilities. Background checks are administered in accordance with applicable law.