Head of Enterprise Risk Management

OpenAI

. Design and evolve OpenAI’s enterprise risk management framework, including risk taxonomy, governance standards, risk appetite, escalation thresholds, and mitigation expectations .

Posted 10/14/2026full-timeSan Francisco • California • United StatesLead💰 $216,000 - $295,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in enterprise risk management (ERM) frameworks, including risk assessments, governance standards, and key risk indicators. Proven ability to lead cross-functional teams and integrate advanced technologies such as data analytics and automation into risk management processes.

Highest-signal resume keywords

Enterprise Risk Management (ERM)Governance, Risk, and Compliance (GRC)Data AnalyticsRisk AssessmentTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk TaxonomyRisk AppetiteKey Risk Indicators (KRIs)ControlsIssue ManagementCOSO FrameworkISO/IEC 27001GRC PlatformsAutomationAI-Assisted Workflows

Soft Skills

CoachingCommunicationCollaborationCuriosityAccountability

Tools & Technologies

Data ArchitectureAPIsSystem IntegrationsCloud EnvironmentsExecutive Dashboards

Certifications & Qualifications

CIACPACISACRMACRM

Industry Keywords

Enterprise RiskOperational RiskComplianceInternal AuditSecurity Governance

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Design and evolve OpenAI’s enterprise risk management framework, including risk taxonomy, governance standards, risk appetite, escalation thresholds, and mitigation expectations
Lead enterprise risk assessments and maintain a centralized risk register covering strategic, financial, operational, technology, security, compliance, and emerging risks
Establish key risk indicators, continuous-monitoring capabilities, and executive dashboards
Enable risk-informed change governance for new products, markets, partnerships, acquisitions, major systems, and other high-impact initiatives
Lead governance forums with Compliance, Finance, Security, and other cross-functional partners
Prepare concise reporting for senior leadership and the Board
Define the strategy and roadmap for a modern ERM platform integrating identity, finance, HR, ticketing, code, and other enterprise systems
Apply automation, policy-as-code, data analytics, and AI-assisted workflows to evidence collection, control monitoring, issue management, risk analysis, and audit or regulatory responses
Coordinate risk activities across Finance, Security, Legal, Compliance, Engineering, Operations, and Internal Audit
Clarify ownership and reduce duplication across the three lines of defense
Build, coach, and lead a high-performing team
Strengthen first-line ownership and foster a culture of practical risk management, curiosity, accountability, and continuous improvement

Requirements

What you’ll need

12+ years of experience across enterprise or operational risk, compliance, internal audit, security governance, finance, or related fields, including significant experience leading ERM or GRC programs
Track record of building or materially scaling an enterprise risk program in a fast-growing, technology-driven, or otherwise complex global organization
Strong command of ERM and assurance practices, including risk appetite, risk assessments, KRIs, controls, issue management, and the three-lines model
Familiarity with frameworks such as COSO or ISO/IEC 27001/27017/27018/27701/42001
Experience advising executives and presenting risk information to senior governance bodies
Technical fluency with GRC platforms, data architecture, APIs, system integrations, cloud environments, and automated workflows
Experience using data analytics, automation, or AI-enabled tools to improve risk sensing, evidence analysis, control monitoring, and reporting
Ability to connect strategic, financial, operational, technology, security, and compliance risks and work effectively across technical and non-technical teams
Demonstrated success hiring, coaching, and developing multidisciplinary teams while operating effectively in ambiguity and at high velocity
Relevant bachelor’s degree or equivalent practical experience
Credentials such as CIA, CPA, CISA, CRMA, CRM, or an advanced business, legal, or technical degree are valued
Ability to work from the San Francisco office three days per week
Authorization to work in the country where the job is located

Benefits

Comp & perks

Equity
Performance-related bonus(es) for eligible employees
Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents)
Paid medical and caregiver leave (up to 8 weeks)
Flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays
Multiple paid coordinated company office closures throughout the year for focus and recharge
Paid sick or safe time
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend
Daily meals in our offices, and meal delivery credits as eligible
Relocation support for eligible employees
Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided.