Cybersecurity & Technology Audit Leader

About the Team

The OpenAI Audit Team is on a mission to build the future of internal audit from the ground up. Our ambition will be powered by a high-energy technically exceptional team with the judgment intellectual curiosity and creativity to harness the latest advances in AI and design a truly next-generation audit function.

As AI reshapes how work is performed across the enterprise Internal Audit will use AI automation and data analytics to identify and assess the most significant and emerging risks across the business including technology cybersecurity finance compliance operations and data.

We will build trusted partnerships at every levelfrom the Board of Directors and senior leadership to the teams delivering on OpenAIs mission every day. We will operate as both an independent assurance provider and a trusted advisor bringing an objective and pragmatic perspective to critical decisions. By engaging closely with management while preserving our independence we will help the business innovate responsibly move with confidence and manage risk without creating unnecessary barriers.

About the Role

As the Cybersecurity & Technology Audit Leader you will help shape the strategy methodology technology and culture of a new audit function. You will lead complex audits and advisory reviews of cybersecurity technology data and AI-related risks while advising leaders on practical ways to strengthen governance resilience and risk management.

You are an experienced hands-on professional who combines deep technical expertise with strong business judgment. You can quickly move between executive-level governance questions and detailed technical analysis use data to identify and assess risk and form clear well-supported conclusions in fast-moving or ambiguous situations.

You will have meaningful influence over how the function develops including how we apply AI automation and analytics to audit planning testing monitoring and reporting. This is an opportunity to help build a state-of-the-art capability rather than inherit a traditional audit model.

This role is based in San Francisco CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees.

In this role you will:

• Build and execute a risk-based audit and advisory strategy across cybersecurity infrastructure systems architecture cloud environments data software development change management operational resilience and AI.

• Drive strong governance and oversight of critical technology programs and emerging AI risks including model governance data provenance and quality privacy security responsible AI third-party dependencies monitoring and human oversight.

• Assess complex technical environments and control effectiveness across areassuch as architecture access models system logs code repositories cloud controls vulnerability data and security monitoringwith a focus on distinguishing material risks from lower-value compliance issues.

• Translate complex technical findings into clear business implications and practical recommendations that enable innovation while supporting effective risk management.

• Build advanced audit capabilities using data analytics automation and AI to improve risk assessment audit scoping testing continuous monitoring and reporting including identifying anomalies control weaknesses and emerging risks.

• Build trusted relationships across the organization and support clear effective reporting to executive management regulators and the Board.

• Monitor developments in technology threat activity regulation and industry practices to keep the audit approach current and forward-looking.

• Coach colleagues share technical expertise and contribute to a culture of high standards sound judgment curiosity ownership and continuous learning.

You might thrive in this role if you have:

• 12-15 years of relevant experience in cybersecurity technology audit technology risk security engineering data risk cloud security or a related field.

• Strong technical expertise across several areas such as cloud platforms identity and access management application security infrastructure networks vulnerability management incident response security operations data platforms or software development.

• Strong knowledge of data architecture provenance lineage quality governance access and analytics including the risks associated with using data in AI systems.

• Knowledge of AI and machine-learning risks along with experience using data analytics scripting automation or AI-assisted techniquesor a demonstrated ability to develop these capabilities quickly.

• The ability to understand complex systems ask incisive questions evaluate incomplete information and reach well-supported conclusions with sound judgment.

• The confidence to challenge constructively and a business-enabling mindset that balances innovation speed business impact and risk.

• Strong communication and relationship-building skills including the ability to explain complex technical issues to executives and work effectively with technology leaders engineers risk professionals and senior management.

• Comfort operating in a fast-paced evolving environment with the initiative curiosity and adaptability to help build a new team and capability.

• A bachelors degree in cybersecurity computer science information systems engineering data science accounting or a related disciplineor equivalent practical experience.

• Relevant certifications such as CISSP CISA CISM CRISC CCSP cloud-provider certifications or data and AI credentials are valued but not required.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core and to achieve our mission we must encompass and value the many different perspectives voices and experiences that form the full spectrum of humanity.

We are an equal opportunity employer and we do not discriminate on the basis of race religion color national origin sex sexual orientation age veteran status disability genetic information or other applicable legally protected characteristic.

For additional information please see OpenAIs Affirmative Action and Equal Employment Opportunity Policy Statement.

Background checks for applicants will be administered in accordance with applicable law and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws including the San Francisco Fair Chance Ordinance the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct adverse and negative relationship with the following job duties potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary confidential and non-public addition job duties require access to secure and protected information technology systems and related data security obligations.

To notify OpenAI that you believe this job posting is non-compliant please submit a report through this form. No response will be provided to inquiries unrelated to job posting compliance.

We are committed to providing reasonable accommodations to applicants with disabilities and requests can be made via this link.

OpenAI Global Applicant Privacy Policy

At OpenAI we believe artificial intelligence has the potential to help people solve immense global challenges and we want the upside of AI to be widely shared. Join us in shaping the future of technology.