Head of Third Party Risk Management

About the Technical Finance Team at OpenAI: The Technical Finance team at OpenAI is crucial for maintaining our organization's financial and operational integrity. We focus on managing key risk areas, developing robust frameworks, and ensuring compliance with industry standards. Our team collaborates across functions to improve processes and safeguard OpenAI's objectives, making risk management an integral part of achieving our mission.

Join Our Mission: We are looking for an experienced and dynamic Third Party Risk Manager to build and lead our Third Party Risk Management (TPRM) function from the ground up. This critical role involves designing and implementing a comprehensive TPRM program to identify, assess, and monitor risks across our third-party ecosystem. The successful candidate will work closely with stakeholders from Security GRC, Legal, and other business units, serving as the central coordinator for TPRM and driving the program's maturity and effectiveness.

Strategic Leadership: Reporting directly to the Head of Internal Controls, the candidate will play a pivotal role in shaping OpenAI's risk management landscape. This is an opportunity to establish a function that aligns with our growth trajectory and mission, ensuring that our partnerships and vendor relationships remain secure, compliant, and resilient.

In This Role, You Will:

Own Risk Management:

• Establish a TPRM Program: Develop frameworks, policies, procedures, and tools to identify, assess, and manage third-party risks across OpenAI's operations.

• Conduct Risk Assessments: Coordinating initial and ongoing evaluations of vendors across domains, working with risk-owners across the business in addressing data security, cyber risk, regulatory compliance, and operational impact.

• Design Monitoring Processes: Create robust risk monitoring systems with clearly defined thresholds to ensure early detection and mitigation of risks.

Lead and Collaborate:

• Central Coordinator for TPRM: Serve as the central point of contact for TPRM, integrating and aligning efforts from Security, Legal, and other teams into a cohesive program.

• Champion Program Development: Advocate for TPRM best practices, build awareness across the organization, and drive program maturity.

• Incident Response: Partner with Security and Legal teams to assess third-party incidents, ensuring effective response and communication strategies.

Monitor and Improve Processes:

• Training and Awareness: Design and deliver training programs to educate stakeholders on TPRM policies and foster a culture of risk awareness.

• Reporting and Metrics: Develop and deliver regular reports to leadership, highlighting program effectiveness, vendor risk profiles, and incident responses. Establish KPIs to track performance.

• Stay Current: Monitor industry trends, regulatory changes, and best practices to enhance the TPRM program's efficiency and effectiveness.

You Might Thrive in This Role If You Have:

• Experience: At least 8+ years in Third Party Risk Management, preferably within high-growth tech companies. Proven experience building TPRM functions is highly desirable.

• Technical Knowledge: Understanding of privacy, data security, cyber risk, regulatory compliance, and risk management practices in a tech environment.

• Leadership Skills: Strong project management and leadership abilities to influence cross-functional teams without direct authority.

• Interpersonal Skills: Excellent communication and relationship-building skills to collaborate effectively with Security GRC, Legal, Finance, and business units.

• Analytical Expertise: Ability to analyze complex risks and provide actionable recommendations aligned with business objectives.

• Certifications: CRISC, CTPRP, or equivalent risk management certifications are a plus.

Why Join OpenAI? This is a unique opportunity to shape a critical function in a high-growth tech company from its inception. At OpenAI, you'll have the chance to build a TPRM program that will scale with our business, work with passionate and talented colleagues, and make a tangible impact on our risk landscape.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.

We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or any other legally protected status.

OpenAI Affirmative Action and Equal Employment Opportunity Policy Statement

For US Based Candidates: Pursuant to the San Francisco Fair Chance Ordinance, we will consider qualified applicants with arrest and conviction records.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link.

OpenAI Global Applicant Privacy Policy

At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

Compensation Range: $240K - $295K