← All roles

Head of Enterprise Risk Management

OpenAI· Finance
Apply on company site
Hybrid (San Francisco)Full-timePosted 5d ago

About the role

Lead the design and execution of OpenAI’s modern enterprise risk management program and platform, integrating risk strategy, governance, data, and AI-enabled workflows to support responsible innovation and growth.

Responsibilities

  • Design and evolve OpenAI’s enterprise risk management framework, including risk taxonomy, governance standards, risk appetite, escalation thresholds, and mitigation expectations.
  • Lead enterprise risk assessments and maintain a centralized, decision-useful risk register reflecting strategic, financial, operational, technology, security, compliance, and emerging risks.
  • Establish key risk indicators, continuous-monitoring capabilities, and executive dashboards that translate complex data into clear signals, trends, and actions.
  • Enable risk-informed change governance for new products, markets, partnerships, acquisitions, major systems, and other high-impact initiatives.
  • Lead effective governance forums cross-functionally with Compliance, Finance, Security and others, and prepare concise reporting for senior leadership and the Board.
  • Define the strategy and roadmap for a modern ERM platform that will connect with systems across the enterprise including identity, finance, HR, ticketing, code, and others through reliable integrations and shared data models.
  • Apply automation, policy-as-code, data analytics, and AI-assisted workflows to evidence collection, control monitoring, issue management, risk analysis, and audit or regulatory responses.
  • Coordinate risk activities across Finance, Security, Legal, Compliance, Engineering, Operations, and Internal Audit, clarifying ownership and reducing duplication across the three lines of defense.
  • Build, coach, and lead a high-performing team, strengthen first-line ownership, and foster a culture of practical risk management, curiosity, accountability, and continuous improvement.

Qualifications

  • 12+ years of experience across enterprise or operational risk, compliance, internal audit, security governance, finance, or related fields, including significant experience leading ERM or GRC programs.
  • A track record of building or materially scaling an enterprise risk program in a fast-growing, technology-driven, or otherwise complex global organization.
  • Strong command of ERM and assurance practices, including risk appetite, risk assessments, KRIs, controls, issue management, and the three-lines model; familiarity with frameworks such as COSO or ISO/IEC 27001/27017/27018/27701/42001.
  • Experience advising executives and presenting risk information to senior governance bodies, with the judgment to make complex tradeoffs clear and actionable.
  • Technical fluency with GRC platforms, data architecture, APIs, system integrations, cloud environments, and automated workflows; experience with infrastructure-as-code, CI/CD, or policy-as-code is a plus.
  • Experience using data analytics, automation, or AI-enabled tools to improve risk sensing, evidence analysis, control monitoring, and reporting.
  • The ability to connect strategic, financial, operational, technology, security, and compliance risks and to work effectively across technical and non-technical teams.
  • Demonstrated success hiring, coaching, and developing multidisciplinary teams while operating effectively in ambiguity and at high velocity.
  • A relevant bachelor’s degree or equivalent practical experience; credentials such as CIA, CPA, CISA, CRMA, CRM, or an advanced business, legal, or technical degree are valued.

Benefits

  • Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
  • Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
  • 401(k) retirement plan with employer match
  • Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
  • Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
  • 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time
  • Mental health and wellness support
  • Employer-paid basic life and disability coverage
  • Annual learning and development stipend to fuel your professional growth
  • Daily meals in our offices, and meal delivery credits as eligible
  • Relocation support for eligible employees
  • Additional taxable fringe benefits, such as charitable donation matching and wellness stipends
Last updated Oct 22, 2026. Interested? Apply on the company site.

About OpenAI

ai-infrastructure-and-developmentliquid-ai-recruiting-targetllmsetter-30setter-30-2026-q1speech-to-texttext-to-speechvoice-ai-stack
Company profileWebsite

More open roles at OpenAI