Manager, IT Risk and Controls

IT Risk & Controls Manager

The IT Risk & Controls function sits within the Finance Risk Management (FRM) team and plays a critical role in designing secure, compliant, and scalable systems that support our mission.

Our team is responsible for implementing and governing IT General Controls (ITGC) and automated application controls (ITAC) that underpin the integrity of financial reporting. Our work spans access and change management, segregation of duties, system configuration, and integration oversight. We partner closely with Engineering, Security, and Compliance to ensure financial systems are compliant, resilient, and automation-ready.

FRM, as the broader function, leads OpenAI's financial risk posturespanning governance over internal controls, third-party risk, audit readiness, and financial systems oversight. Together, we provide the foundation of trust that enables OpenAI to operate at global scale.

About the Role

We're seeking an experienced, execution-focused Manager or Senior Manager to help build a world-class IT controls environment supporting finance-critical systems. In this role, you'll lead the design, assessment, and readiness of controls, evaluate risk across systems and integrations, and ensure that our control environment is rigorous, scalable, and aligned with business growth. You'll work closely with Engineering, Security, and Finance teams to embed proactive, technology-driven control solutions into our operations.

This role is based in San Francisco. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees.

In this role you will :

• Overseeing IT risk and control design across enterprise ERPs and third-party applications supporting financial reporting, ensuring end-to-end reliability of system integrations.
• Leading risk assessments and control design for revenue workflows and system-driven revenue processes.
• Partnering with cross-functional teams to ensure automation logic aligns with financial reporting standards.
• Overseeing IT risk for key finance-related domains, ensuring controls are reliable, testable, and clearly owned.
• Coordinating infrastructure and platform control reviews, including availability safeguards, access management, and configuration stability.
• Managing change management, access governance, and configuration oversight across enterprise applications.
• Supporting audit readiness through evidence gathering, documentation, and walkthroughs.
• Driving control automation and continuous monitoring initiatives.
• Acting as primary liaison for external auditors on IT risk-related matters.

You might thrive in this role if you have :

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.