Role Overview
The GRC Manager position at OpenRouter is a remote, full-time role based in the US within the operations department, offering a salary of $175,000 to $205,000 per year. This hands-on position suits an independent compliance professional who enjoys taking complete ownership of regulatory programs and translating emerging AI standards into practical business controls.
Key Responsibilities
Manage the Drata compliance platform completely, handling administration, integrations, test health monitoring, and manual evidence gathering.
Maintain the SafeBase knowledge base to support sales with customer security questionnaires and act as the escalation point.
Oversee personnel compliance by managing policy acknowledgments, device compliance, and recurring security training.
Facilitate regular ceremonies including user access reviews, penetration tests, business continuity table tops, annual policy reviews, and risk assessments.
Collaborate closely with the engineering team to address product compliance questions regarding data handling and customer commitments.
Ensure continuous audit readiness for major frameworks like SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act.
Interpret new and emerging AI regulations to establish functional operational controls.
Partner alongside HR, Legal, Customer Support, and Finance to integrate compliance smoothly into current workflows.
Requirements
Multiple years of hands-on experience working directly in GRC and compliance programs.
Direct ownership of at least one complete SOC 2 audit cycle from evidence collection through fieldwork.
Administrative fluency using compliance automation software, with a strong preference for Drata.
Technical understanding sufficient to discuss architecture and data flows effectively with engineers.
Demonstrated ability to influence cross-functional teams successfully without creating friction.
Comfort operating in ambiguous environments where requirements change and established precedents are absent.
Nice to Have
Prior experience managing PCI DSS within a startup environment.
Background handling HIPAA requirements as a Business Associate.
Familiarity with the EU AI Act or other emerging artificial intelligence regulations.
Professional certifications such as CISA, CISSP, or CIPP.
Experience serving as the first compliance hire at an organization.
Scripting skills utilized for automating evidence collection.
Skills and Tools
Compliance Automation Platforms (Drata)
Trust and Security Knowledge Base Management (SafeBase)
Regulatory Frameworks (SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, EU AI Act)
Risk Assessments and Incident Response Table Tops
Cross-Functional Leadership and Stakeholder Engagement
Salary and Benefits
Annual salary range of $175,000 to $205,000 USD.
About the Company
OpenRouter operates as an AI routing and infrastructure layer allowing enterprises to access, manage, and optimize large language models across multiple providers without vendor lock-in, capacity limits, or excess costs. The company empowers advanced AI teams to scale quickly and stay adaptable as foundational models evolve.
How to Apply
Interested candidates should visit the official OpenRouter careers page to submit an application for this role.
