← All roles

GRC Manager

OpenRouter· IT & Security
Apply on company site
Remote$175k - $205kFull-timePosted 3w ago

About the role

OpenRouter seeks a GRC Manager to own and execute the company’s compliance program across multiple frameworks (SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, EU AI Act). The role is hands-on, strategic, and requires coordinating with Engineering, HR, Legal, Finance, and Support to embed compliance into ongoing work while navigating evolving AI regulations.

Responsibilities

  • Own Drata end to end — administration, integrations, monitoring test health, and the manual evidence collection automation doesn't reach.
  • Curate the SafeBase knowledge base so sales can self-serve most customer security questionnaires — and be the escalation point for the ones they can't.
  • Drive personnel compliance: policy acknowledgments, device compliance, and recurring security and compliance training.
  • Lead recurring ceremonies: user access reviews, penetration tests, BCDR and incident response tabletops, annual policy review and updates, risk assessments.
  • Work directly with Engineering on product-related compliance questions, from data handling to customer commitments.
  • Maintain audit readiness across SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act.
  • Translate emerging AI regulation into controls we can actually operate, rather than waiting for someone else's checklist.
  • Partner with HR, Legal, Customer Support, and Finance so compliance fits into work that's already happening.

Qualifications

  • Several years in GRC or compliance, hands-on — you've built and run programs, not just governed them.
  • At least one SOC 2 audit cycle owned end to end, evidence through fieldwork.
  • Admin-level fluency in a compliance automation platform (Drata strongly preferred).
  • Technical enough to hold a real conversation with engineers about architecture and data flows.
  • Proven cross-functional influence without becoming the person everyone avoids.
  • Comfortable when requirements shift and precedent doesn't exist.

Skills

Required:GRC program management
Last updated Oct 15, 2026. Interested? Apply on the company site.
OpenRouter logo

About OpenRouter

The Unified Interface For LLMs

A router for LLMs and other AI models

ai-infrastructure-and-developmentbrex-fastest-growing-2025wing-list-2026wing-list-2026-mid-stage
Company profileWebsite

More open roles at OpenRouter