Head of Enterprise Risk Management
OpenAI · San Francisco
About this role
## About the Team The OpenAI Risk & Audit team is building an enterprise risk capability for a company operating at the frontier of AI. We help leaders identify, understand, and manage the risks that matter most while enabling responsible innovation and durable growth. We are developing a modern enterprise risk management (ERM) program and the technology foundation that powers it—connecting risk strategy, governance, compliance, and assurance with high-quality data, automated workflows, continuous monitoring, and AI-enabled analysis. We partner across Finance, Security, Legal, Engineering, Product, People, Operations, and Internal Audit, and provide clear reporting to senior leadership and the Board. We aim to make risk ownership practical, decision-useful, and embedded in how OpenAI builds and scales. --- ## About the Role As the **Head of Enterprise Risk Management**, you will help build and lead an integrated ERM program and the ERM platform that supports it. You will establish common risk language, governance, and decision processes while translating them into scalable systems, data products, and workflows. This is a hands-on leadership role at the intersection of risk, operations, and technology. You will work with technical and business teams to connect source systems, improve data quality, automate evidence and control monitoring, and use AI to surface emerging risks and accelerate analysis. You will also help create a strong risk culture, coordinate assurance across the three lines, and communicate complex issues with clarity and sound judgment. **Location:** San Francisco, CA (hybrid: 3 days in the office per week). Relocation assistance available. --- ## In this role, you will: - Design and evolve OpenAI’s enterprise risk management framework, including risk taxonomy, governance standards, risk appetite, escalation thresholds, and mitigation expectations. - Lead enterprise risk assessments and maintain a centralized, decision-useful risk register covering strategic, financial, operational, technology, security, compliance, and emerging risks. - Establish key risk indicators (KRIs), continuous-monitoring capabilities, and executive dashboards that translate complex data into clear signals, trends, and actions. - Enable risk-informed change governance for new products, markets, partnerships, acquisitions, major systems, and other high-impact initiatives. - Lead effective governance forums cross-functionally (e.g., Compliance, Finance, Security) and prepare concise reporting for senior leadership and the Board. - Define the strategy and roadmap for a modern ERM platform connecting with enterprise systems (e.g., identity, finance, HR, ticketing, code) via reliable integrations and shared data models. - Apply automation, policy-as-code, data analytics, and AI-assisted workflows to evidence collection, control monitoring, issue management, risk analysis, and audit/regulatory responses. - Coordinate risk activities across Finance, Security, Legal, Compliance, Engineering, Operations, and Internal Audit—clarifying ownership and reducing duplication across the three lines of defense. - Build, coach, and lead a high-performing team; strengthen first-line ownership; foster a culture of practical risk management, curiosity, accountability, and continuous improvement. --- ## You might thrive in this role if you have: - **12+ years** of experience across enterprise/operational risk, compliance, internal audit, security governanc
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.