Compliance Program Manager — Regulatory Compliance
OpenAI · San Francisco
About this role
## Compliance Program Manager — Regulatory Compliance ### About the team Governance, Risk, and Compliance (GRC) builds compliance programs and provides assurance for OpenAI’s technology, people, and products. We combine technical understanding with practical operations to reduce risk, support product and research teams, and produce reliable evidence of how our controls work. ### About the role As a **Regulatory Compliance Program Manager**, you will build and operate programs that turn regulatory requirements into clear responsibilities, effective processes, and evidence that can withstand external scrutiny. Your work will focus on **AI safety/security** and **content moderation**, with **privacy operations** as an adjacent area. You will partner with **Legal** and the teams that build and operate our products to scope the work, maintain accurate control narratives, prepare regulatory responses, and lead external assessments for your assigned portfolio. You should be comfortable owning delivery, explaining tradeoffs, and changing your recommendation when the evidence changes. **Success looks like:** controls with accountable owners, evidence that stays current, and teams that can respond accurately without repeatedly rebuilding the same work. ### Responsibilities - Lead an agreed portfolio of **AI safety/security** and **content-compliance** work, including programs associated with the **EU AI Act, DSA, OSA, and SB 53** (with Legal and relevant experts confirming applicable requirements). - Translate requirements into scoped programs, operating processes, control/evidence responsibilities, milestones, and escalation paths. - Build and maintain accurate **control narratives** and **traceable evidence** for regulatory requests, reporting, audits, and assessments. - Lead preparation and delivery for **external compliance assessments**; coordinate responsible teams and track gaps through verified resolution or an explicitly owned decision. - Prioritize work that materially improves compliance outcomes and reduces risk—clearly explain what should proceed, change, or wait and why. - Develop evidence-backed recommendations with **Legal, Product, Security, Safety, Integrity, Privacy**, and other functional teams; obtain decisions from authorized owners for legal interpretation, external representations, and risk acceptance. - Improve operational workflows for content and privacy compliance while keeping implementation/operation of controls with the appropriate functional owners. - Simplify and automate repeated administrative work; test results and verify adoption and accurate, reliable outputs. - Learn the GRC security-control environment and participate in the team’s on-call rotation (scope/expectations shared during hiring). - Communicate clearly, surface uncertainty early, incorporate feedback, and build domain knowledge for the next priority. ### You might thrive if you have - Practical experience building and operating **AI safety/security** and **content-moderation** programs, and can explain your decisions, contributions, and results. - Experience using **agentic tooling** to automate and improve scaled processes. - Understanding of relevant technical concepts across model evaluation, training and release, safety controls, content moderation, and post-launch operations—plus knowing where specialist input is needed. - Strong understanding of relevant AI safety, content, and privacy requirements (including **EU AI Act, DSA, OSA, SB
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.