Manager, IT Risk and Controls

About the Team The IT Risk & Controls function sits within the Finance Risk Management (FRM) team and plays a critical role in designing secure, compliant, and scalable systems that support our mission. Our team is responsible for implementing and governing IT General Controls (ITGC) and automated application controls (ITAC) that underpin the integrity of financial reporting. Our work spans access and change management, segregation of duties, system configuration, and integration oversight. We partner closely with Engineering, Security, and Compliance to ensure financial systems are compliant, resilient, and automation-ready. FRM, as the broader function, leads OpenAI’s financial risk posture—spanning governance over internal controls, third-party risk, audit readiness, and financial systems oversight. Together, we provide the foundation of trust that enables OpenAI to operate at global scale. About the Role We’re seeking an experienced, execution-focused Manager to help build a world-class IT controls environment supporting finance-critical systems. In this role, you’ll lead the design, assessment, and readiness of controls, evaluate risk across systems and integrations, and ensure that our control environment is rigorous, scalable, and aligned with business growth. You’ll work closely with Engineering, Security, and Finance teams to embed proactive, technology-driven control solutions into our operations. What you’ll do: - Own IT SOX readiness for finance and HR-related systems, and other systems impacting financial reporting. - Design and improve controls across end-to-end, system-driven processes such as revenue workflows, financial close, payroll, equity administration, procurement intake/approvals, and HR/Finance integrations. - Partner closely with Finance, Accounting, HR, Engineering, Security, and system owners to make sure system logic, automations, integrations, roles, workflows, and configurations support accurate and reliable financial reporting. - Evaluate Oracle Fusion access, role design, segregation of duties, privileged access, provisioning/deprovisioning, quarterly access reviews, audit logging, and key finance configurations. - Assess Oracle Fusion change and configuration governance, including setup changes, approval workflows, flexfields, scheduled jobs, integrations, custom reports, and release/update impacts.. - Support audit readiness end-to-end: walkthroughs, documentation, evidence standards, PBC coordination, and auditor Q&A. - Drive smarter ways of working by improving control automation, standardization, and continuous monitoring across Oracle Fusion and connected finance, HR, and procurement systems. - Act as the day-to-day point of contact for external auditors on IT risk, ITGCs, automated controls What we’re looking for: - Bachelor’s or Master’s degree in Accounting, Finance, Business Administration, Information Systems, or a related field, or equivalent experience. - 5+ years of experience in IT audit, SOX, internal controls, or risk management, with hands-on exposure to financial reporting systems. - Strong hands-on Oracle Fusion Cloud ERP experience, especially in an ITGC, SOX, IT audit, or controls capacity. - Experience designing and testing ITGCs for Oracle Fusion, including user access, role provisioning, privileged access, segregation of duties, change/configuration management, job monitoring, and availability controls. - Experience with Oracle Fusion Financials controls across areas such as general ledger, procure-to-pay accounting impacts, order-to-cash/revenue, financial close, reporting, integrations, and key configurations. - Familiarity with Workday controls related to HR master data, payroll inputs/outputs, role-based access, integrations, and downstream finance impacts. - Familiarity with Zip or similar procurement intake/workflow platforms, including approval workflows, access controls, vendor/request data, and integrations with ERP or finance systems. - Strong experience designing and testing automated and application controls across modern cloud-based ERP and third-party finance platforms. - Understanding of Oracle Fusion security concepts, including roles, privileges, data access, Security Console, audit reports/logs, and access review evidence. - Practical experience reviewing SOC 1 reports, understanding control coverage, identifying gaps/CUECs, and advising teams on how to operationalize SOC reliance. - Solid understanding of downstream finance processes, including financial close, payroll, equity administration, procurement, and system-driven accounting workflows. - Comfortable operating in a startup or high-growth environment, able to balance speed, risk, and control maturity. - Clear communicator who can translate Oracle, audit, and risk concepts into actionable guidance for non-audit partners. - Strong organizational and project management skills, with the ability to juggle multiple initiatives and stakeholders. Nice to have:

Bachelor’s or Master’s degree in Accounting, Finance, Business Administration, Information Systems, or a related field, or equivalent experience. 5+ years of experience in IT audit, SOX, internal controls, or risk management, with hands-on exposure to financial reporting systems. Strong hands-on Oracle Fusion Cloud ERP experience, especially in an ITGC, SOX, IT audit, or controls capacity. Experience designing and testing ITGCs for Oracle Fusion, including user access, role provisioning, privileged access, segregation of duties, change/configuration management, job monitoring, and availability controls. Experience with Oracle Fusion Financials controls across areas such as general ledger, procure-to-pay accounting impacts, order-to-cash/revenue, financial close, reporting, integrations, and key configurations. Familiarity with Workday controls related to HR master data, payroll inputs/outputs, role-based access, integrations, and downstream finance impacts. Familiarity with Zip or similar procurement intake/workflow platforms, including approval workflows, access controls, vendor/request data, and integrations with ERP or finance systems. Strong experience designing and testing automated and application controls across modern cloud-based ERP and third-party finance platforms. Understanding of Oracle Fusion security concepts, including roles, privileges, data access, Security Console, audit reports/logs, and access review evidence. Practical experience reviewing SOC 1 reports, understanding control coverage, identifying gaps/CUECs, and advising teams on how to operationalize SOC reliance. Solid understanding of downstream finance processes, including financial close, payroll, equity administration, procurement, and system-driven accounting workflows. Comfortable operating in a startup or high-growth environment, able to balance speed, risk, and control maturity. Clear communicator who can translate Oracle, audit, and risk concepts into actionable guidance for non-audit partners. Strong organizational and project management skills, with the ability to juggle multiple initiatives and stakeholders.