Startups · AI

GRC Manager

OpenRouter · Remote (US) · Remote

← All jobs
About OpenRouter

The unified interface for every model. Find the best models & prices for your prompts. Backed by a16z and Menlo.

About the role

You own our compliance program day to day. Drata and Safebase are yours. SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act are yours. You'll report to the Head of IT & Security, and you'll run the program with very little daily management. Found on 1752vc Careers, the job board for startup and VC roles.

What they're looking for

  • Several years in GRC or compliance, hands-on — you've built and run programs, not just governed them
  • At least one SOC 2 audit cycle owned end to end, evidence through fieldwork
  • Admin-level fluency in a compliance automation platform (Drata strongly preferred)
  • Technical enough to hold a real conversation with engineers about architecture and data flows
  • Proven cross-functional influence without becoming the person everyone avoids
  • Comfortable when requirements shift and precedent doesn't exist
More about this role

OpenRouter is the leading AI routing and infrastructure layer that enterprises use to access, manage, and optimize the best large language models across providers—without lock-in, capacity constraints, or unnecessary cost. We power the most advanced AI teams in the world by giving them the flexibility to move fast, scale confidently, and stay future-proof as models evolve.

As enterprise adoption of AI accelerates, OpenRouter sits at the center of how organizations operationalize LLMs across research, product, and production workloads.

You own our compliance program day to day. Drata and Safebase are yours. SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act are yours. You'll report to the Head of IT & Security, and you'll run the program with very little daily management.

The controls are the easy part. The real work is getting an engineer mid-sprint to pull evidence, getting the whole company through training before the deadline, and doing it in a way that makes people take your next request seriously instead of ignoring it. If your ideal job is overseeing a program that someone else operates, this is not the role for you. We are looking for a strategic builder ready to...

Read the full posting on OpenRouter's site ↗

Operations

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.