Risk And Compliance Manager in United States

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. We’re excited about building creative solutions to ambiguous security requirements and delivering new technologies to mission critical customers. The GRC team provides security and engineering expertise to ensure our customers’ most critical and stringent requirements are met. We are technical in what we build but are operational in how we do our work, and are committed to obtaining, expanding, and maintaining Authorizations to Operate (ATOs) for critical systems while fostering a collaborative and execution-driven culture. About the Role Our technologies support some of the most important and impactful work in the world, including our strategic and high-impact customers in the public sector. As a GRC Program Manager, you’ll play a pivotal role in achieving US government (USG) ATOs and compliance frameworks, including but not limited to FedRAMP and Department of War (DoW),for OpenAI products and support agency-specific ATOs for systems deployed in highly regulated and secure environments. You’ll work closely with engineers, internal stakeholders, and external assessors to design, document, and implement security controls that meet stringent compliance requirements. Your creativity and execution-focused approach will be critical in navigating complex challenges while maintaining the trust of our stakeholders. We’re looking for people who bring: Proven experience in obtaining and maintaining a FedRAMP ATO and agency specific ATOs in highly restricted environments, within government or regulated sectors. A deep understanding of USG security frameworks and policies (e.g., NIST, RMF, FedRAMP). Ability to communicate technical concepts to diverse audiences, including engineers and non-technical stakeholders. Exceptional technical program management skills, with the ability to multitask and deliver large complex programs under pressure. This role is base

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Product Lifecycle Assurance IC to help scale OpenAI’s GRC function across our product stack to ensure products address customer and regulatory compliance requirements at launch and regressions are detected promptly and corrected. You will partner closely with Product, Security, Legal, and Privacy teams to make sure OpenAI can move quickly while maintaining our security, privacy and compliance claims and giving customers, auditors, and regulators assurance about how OpenAI handles user data. You are responsible for product assurance end-to-end from inception to post-launch (continuous) monitoring. You leverage existing workflows, reviews, and data and enhance, augment and build the components needed to create an end-to-end product assurance program. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply technical operations role to ensure that OAI products meet the compliance bar at launch, regressions are prevented and detected, and our compliance state can be evidenced. This role also helps ensure that our product launch governance program operates effectively across key safety, privacy, legal and security stakeholders and lessons-learned from incidents and regressions are used to improve the program. You or in partnership with engineering teams, build key controls in our infrastructure stack, developer workflows and launch tooling to provide developers with guardrails, perform CI/CD confor

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from. Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for: Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go. Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them. A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level. Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience. A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here and follow us on LinkedIn for company news, employee stories, and career updates. Job Summary: Drata is building a world-class customer education function — and we're looking for the person who will own it. As Learning & Development Specialist, you'll be the architect of how Drata customers learn: designing the programs, building the certifications, and creating the infrastructure that helps thousands of security and compliance practitioners get value from Drata faster a

About the Team OpenAI’s Governance, Risk, and Compliance team helps ensure security and privacy are grounded in how our products and systems actually operate. Assurance Operations partners with Security, Engineering, Infrastructure, Product, Privacy, and Legal to make controls provable, risk decisions explicit, and audit readiness a result of well-designed systems. About the Role We are hiring a technical, product-minded GRC builder who can own consequential audits while improving the control and evidence systems behind them. You will build a reusable common control framework, use Codex to automate assurance work, validate changing system scope, and turn repeated audit friction into measurable improvements. We are looking for someone who questions inherited assumptions, solves novel problems creatively, works closely with engineers, and makes the next audit easier by improving the underlying system. You’ll be responsible for: Lead external, internal, customer, and certification audit work from scoping through evidence review, fieldwork, remediation, and closeout. Build a common control framework linking risk, control intent, implementation, owner, system, environment, evidence, and applicable frameworks. Validate actual scope and ownership instead of assuming last year's controls, product boundaries, or evidence remain accurate. Use Codex to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting. Partner with engineers on cloud architecture, identity, logging, data flows, software changes, vulnerabilities, and control effectiveness. Design maintainable, permission-aware tools that preserve source provenance, human review, and evidence integrity. Reduce repeated requests and operational burden for control owners through measurable workflow improvements. Define roadmaps, decision rights, milestones, success metrics, and clear cross-functional escalations. We’re looking for someone with: Direct ownership

About the Role OpenAI is building a scalable global mobility tax program that enables employees and the business to move quickly while managing tax compliance, risk, and employee experience. As Global Mobility Tax Manager, you will own the strategy and operating model for mobility tax across international and domestic business travel, assignment planning, cross-border moves, and other priority mobility scenarios. This is a high-impact role for a builder who can translate complex tax requirements into clear policies, durable controls, and practical employee and business guidance. You will lead through expertise and influence across Payroll, Corporate Tax, Finance, Legal, People, business teams, and external advisors. In this role, you will: Set the global mobility tax framework, principles, governance, and service model in partnership with Corporate Tax teams. Build clear policies and decision frameworks for international and domestic business travel, assignment planning, cross-border transfers, and other mobility scenarios. Design the end-to-end operating model, including ownership, handoffs, controls, escalations, employee communications, and vendor responsibilities. Partner with Payroll, Corporate Tax, Finance, Legal, People, and business leaders to identify tax implications early and support sound workforce decisions. Establish reporting, dashboards, program health metrics, and issue-management routines that surface risk and drive timely remediation. Automate high-volume workflows and use AI-enabled tools to improve case handling, documentation, data quality, and employee support. Manage external tax advisors and vendor partners, service quality, and delivery against agreed standards, timelines, and outcomes. Monitor regulatory and business changes, assess program impact, and continuously strengthen policies and controls. You might thrive in this role if you: Bring 8+ years of experience in global mobility tax, expatriate tax, business-traveler compliance, or a c

Datadog is a world-class monitoring and security platform for cloud applications. We're dedicated to creating, developing, and supporting our product and customers, fostering seamless collaboration and problem-solving among Dev, Ops, and Security teams globally. Built by engineers for engineers, our SaaS product is trusted by organizations of all sizes across various industries, driving digital transformation, cloud migration, and infrastructure monitoring for our customers' entire technology stacks. As cloud technologies continue to evolve and digital operations become ever more crucial, Datadog remains at the forefront of innovation and is well-positioned for sustained growth. Datadog's Finance team partners with stakeholders across the organization, providing commercial, operational, and analytical support to ensure that Datadog's business continues its rapid and efficient growth. The Equity Administration team is responsible for overseeing the full cycle of stock administration on a global basis, collaborating with groups across Accounting, Tax, People, Payroll, and Legal to manage Datadog's equity plans worldwide. Our work spans the processing of equity transactions including RSU releases, stock option exercises, and ESPP purchases; management of equity-related inquiries from employees, executives, investors, and other key partners; day-to-day management of the E*TRADE Equity Edge Online platform; global equity reporting and tax compliance; oversight of equity procedures, policies, and controls; and employee education on equity programs. We are seeking a hands-on Equity Administration Assistant Manager to own our complex and high-risk equity workstreams. Reporting to the Senior Manager, Equity Administration, the Assistant Manager will serve as a first level preparer or reviewer on equity transactions, assist with process documentation, and work closely with various internal teams across Accounting, Tax, People Operations, Payroll, and Legal. This is a ro

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable

ROLE SUMMARY PGS’s Environmental Sustainability team manages environmental sustainability risks and opportunities across the enterprise and drives the integration of sustainability into business strategy, operations, product development, and supply chain management to support Pfizer’s 2040 Net Zero commitment and broader environmental ambitions. In this role, the Environmental Senior Manager is responsible for developing strategies and solutions related to climate, biodiversity and nature, and product sustainability programs across Pfizer’s internal and external manufacturing network, which includes leading projects and programs both within PGS and across Pfizer, and developing and managing plans to achieve objectives. The role applies advanced knowledge of environmental sustainability and related disciplines to design programs that enable the organization to meet strategic objectives, while anticipating internal and external business, regulatory, and compliance issues. The role partners with External Supply and Procurement to progress net zero delivery with suppliers and serves as an advisor across the organization by providing technical support and guidance, and by working collaboratively to solve problems. In addition, the role helps implement the framework used to track and assess emerging environmental regulations and associated business risk across the geographies in which Pfizer operates. Finally, the Sr Manager Sustainability leads cross-functional teams, driving alignment and broader organizational outcomes without relying on direct reporting authority. It operates independently in many situations, identifies innovative solutions to complex problems, exercises foresight and judgment, and recommends courses of action. The role is recognized internally and externally as a subject matter expert in sustainability. Develop and implement sustainability strategies and programs, inclu

About the role OpenAI is building a world-class global mobility and immigration program—agile, compliant, technology-enabled, and designed to help exceptional people work where they can have the greatest impact. In this role, you will lead high-impact strategic initiatives, including U.S. permanent residence strategy, M&A, organizational change, and global expansion. This is a senior individual-contributor role for a builder who can translate legal and operational complexity into clear, practical solutions. Reporting to the Head of Global Mobility & Immigration, you will partner with the broader team and lead through expertise and influence across Legal, Corporate Development, Recruiting, People, Finance, business teams, and external counsel to turn emerging business needs into scalable programs, policies, and durable controls. What you'll do Set the roadmap, principles, governance, and operating model for priority global mobility and immigration initiatives. Lead the U.S. permanent residence strategy, including PERM planning, controls, communications, compliance and continuous improvement. Own immigration and mobility workstreams for M&A, divestitures, restructurings, entity changes, and new-market entry—from diligence through integration. Lead global expansion strategy, ensuring work authorization, business travel, and compliance in rapidly growing international jurisdictions. Build reusable playbooks, decision frameworks, risk assessments, and change-management plans. Partner with Legal, Corporate Development, Recruiting, People, Finance, and business leaders to identify implications early and drive sound decisions. Establish dashboards and program-health measures covering compliance, cycle time, quality, cost, vendor performance, and employee experience. Manage external counsel and vendor partners through clear service levels, quality standards, budgets, and outcomes. Use systems, automation, and AI-enabled tools to improve case handling, documentati

Privacy Program Manager Description - Privacy Program Manager - Products & Services Privacy Job Summary This role is responsible for providing strategic privacy advisory, guidance and program management support to HP's Products & Services organizations to ensure compliance with global privacy, data protection, AI governance, and regulatory requirements. The role partners closely with product, engineering, legal, security, data governance, and business teams to embed privacy-by-design principles throughout the product lifecycle, assess privacy risks, and drive implementation of compliant solutions that enable innovation while protecting customer, employee, and partner data. The role leads privacy initiatives, manages complex cross-functional programs, develops governance processes, and serves as a trusted advisor to stakeholders on privacy requirements impacting products, services, digital platforms, AI/ML solutions, and emerging technologies. Success in this role requires strong program management, risk assessment, stakeholder engagement, and regulatory interpretation skills. Responsibilities Manage and lead privacy programs supporting HP Products & Services teams to ensure compliance with global privacy and data protection regulations, including GDPR, CCPA/CPRA, LGPD, PIPL, and other applicable international requirements. Serve as a trusted privacy advisor for product, service, software, AI/ML, cloud, and digital platform initiatives by providing practical guidance throughout the development lifecycle. Conduct and facilitate Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), AI risk assessments, and related reviews to identify and mitigate privacy risks. Partner with business, engineering, legal, cybersecurity, data governance, and compliance stakeholders to in

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: As a Legal Operations Manager at Replit, you will be the central point of contact for legal requests across the company and the operational backbone of our contract lifecycle. You will triage and manage incoming legal requests, own contract management end to end, and support broader corporate compliance and data privacy work. Your meticulous attention to detail and proactive approach will keep legal operations running smoothly and reduce risk across the business. Think of yourself as the air traffic controller of our legal universe — making sure every contract, request, and approval lands safely, on time, and in the right hands. Your meticulous attention to detail and proactive approach will not just keep Legal running smoothly — it will make the whole company move faster. If you love building systems, closing loops, and being the person everyone turns to when they need to get something done right, this role was made for you. What You'll Do: Legal Operations Drive the Legal team's operational strategy, understand operational challenges, identify opportunities to improve systems and workflows Implement, maintain, and optimize a best in class AI driven tech stack. Partner cross functionally with AI and GTM/marketing/partnerships teams to identify technologies, negotiate with vendors, and drive implementation. Partner closely with Finance and Legal leadership to manage budget, forecasting, accruals, and track spend Working closely with leadership, own planning cycles, OKRs, and data reporting and metrics Manage outside counsel relationships, including new engagements, billing guidelines invoicing, and e-billing. Drive outside counsel management strategy with a focus on cost discipline and operational accou

Job Title Medical Safety Manager, Hospital Patient Monitoring Job Description Medical Safety Manager, HPM The Medical Safety Manager, Hospital Patient Monitoring is responsible for conducting comprehensive evaluations of safety information sourced form a variety of channels such as Post-Marketing Surveillance (PMS) and literature searches, working under limited supervision. Your role: Provides essential support in bolstering patient safety by actively contributing insights and recommendations to critical processes such as Risk Management, Health Hazard Evaluations (HHE), Risk-Benefit analyses, and recall procedures. Offers valuable assistance in delivering safety-related perspectives for New Product Introduction (NPI) projects, clinical studies, and Post-Marketing Surveillance (PMS) efforts, facilitating informed decision-making. Collaborates effectively to furnish pertinent safety inputs for regulatory submissions and key documents such as Risk-Benefit Analyses (RBA), protocols, Clinical Study Reports (CSR), and Clinical Evaluation Reports (CERs), ensuring compliance and transparency in safety evaluations. Conducts literature reviews and surveillance activities to identify emerging safety issues, ensuring proactive identification and mitigation of potential risks. Provides answers to safety-related inquiries from healthcare professionals, patients, and internal stakeholders, fostering trust and transparency in communication regarding product safety. Contributes to the implementation of safety-related policies, procedures, and programs to promote a culture of safety and compliance within the organization. Maintains awareness of evolving regulations and guidelines related to medical product safety and ensures compliance with applicable requirements. Provides input into the design and conduct of safety studies and medical device vigil

The Travel Manager Americas is accountable for the strategy, operations, and optimization of the company’s corporate travel program across the Americas region, while also providing support for the regional leads. This role requires a consistent, cost‑effective, and employee‑centric travel experience while maintaining compliance with global travel & expense (T&E) policy and regional regulatory requirements. The role partners closely with Finance, HR, Procurement, Security, and regional business leaders to support business growth, traveler safety, and operational excellence. This role can be based remotely in the United States, or hybrid near one of our hub offices. Key Responsibilities Travel Program Strategy & Governance Own the Americas travel program, aligned to global T&E policy and mobility strategy Localize global travel policies for regional requirements (tax, labor, safety, visa, and regulatory) Act as the primary regional escalation point for travel‑related issues Supplier & Vendor Management Manage regional relationships with Travel Management Company (TMC)- Navan, Airlines, hotel chains, car rental providers Support sourcing, RFPs, and contract renewals in partnership with Procurement Track supplier performance against SLAs, cost targets, and traveler satisfaction metrics Financial & Cost Management Drive cost optimization through preferred supplier adoption and traveler behavior change Partner with Finance on budgeting, forecasting, and savings initiatives Monitor leakage, out‑of‑policy spend, and compliance trends Traveler Experience & Support Ensure a seamless, inclusive, and regionally relevant traveler experience Define traveler communications, guidance, and self‑service resources Oversee issue resolution related to disruptions, escalations, or complex bookings Risk, Duty of Care & Compliance Partner with Security and Legal to support duty of care obligations Ensure regional alignment with traveler tracking, emergency r

Company Description Novo is a venture-backed fintech that simplifies banking for small businesses. Since our Fall 2018 beta launch, we've expanded offerings from free checking accounts and debit cards to lending products, business tools (invoices, bookkeeping, and more), and integrations.Today , Novo is a powerfully simple banking platform that serves over 250,000 small businesses. In addition to providing smart tools built for entrepreneurs to better run and grow their businesses, Novo has processed billions in transactions in partnership with a number of established banking partners. Our vision is to be the go-to platform serving small businesses – from launch to everyday – so business owners can focus on growing, while Novo provides seamless money movement, money storage, and access to capital. We'd like to look back 5–10 years from now and know that we helped new generations of small businesses succeed because of the work we did at Novo. Novo raised $170 million in venture capital and is backed by leading investors, including Stripes, Valar Ventures, Crosslink Capital, and Notable Capital (formerly GGV). Learn more at https://www.novo.co . Role Description Novo is seeking a highly experienced and motivated product manager to own and scale our core banking experience — the accounts, money movement, cards, and program infrastructure that power banking for over 250,000 small businesses. This role is critical to ensuring the reliability, usability, and depth of the products at the heart of Novo, supporting our rapidly expanding customer base and business operations. The ideal candidate is a hands-on product leader who can set product direction for complex, regulated financial products, partner closely with Engineering, Design, Risk, and Compliance, and work hand-in-hand with banking partners to ship reliable, secure, high-quality experiences within a dynamic, regulated fintech environment. Responsibilities Product Strategy & Leadership Own the strategy, roadmap,

Work Flexibility: Onsite As the Manager, Quality Assurance , you will lead quality assurance activities that support product quality, process performance, audit readiness, and continuous improvement across site operations. Working closely with Operations, Global Quality, Regulatory Affairs, and supplier partners, you will help ensure quality systems remain effective, compliant, and aligned with business objectives. This role is Onsite in Mahwah, New Jersey . What You Will Do Lead the Quality Assurance team, providing technical guidance and quality oversight across manufacturing and operations, supports functions to drive continuous improvement and compliance. Partner with site leadership to ensure products consistently meet customer expectations, regulatory requirements, and applicable quality standards. Develop, coach, and retain a high-performing team while fostering a culture of inclusion, accountability, collaboration, and employee engagement. Drive quality system compliance by partnering with functional leaders to establish, communicate, and maintain quality standards, requirements, and responsibilities. Lead site readiness activities and support internal, corporate, notified body, FDA, and other regulatory audits and inspections. Oversee the management of nonconforming products, product and process deviations, risk assessments, corrective actions, and preventive actions to ensure effective resolution and compliance. Monitor and improve Quality performance indicators, including NCR, CAPA, compliance, and operational quality metrics, and implement corrective actions for adverse trends. Support the development and execution of local and global Quality Operations strategies that improve product quality, operational efficiency, risk management, and regulatory compliance. <