---
title: 'GRC Manager at OpenRouter'
canonical: 'https://feeny.ai/job/grc-manager-openrouter-united-states-72y537rhzzyq'
type: 'job'
last_seen: '2026-10-17'
---

# GRC Manager at OpenRouter

- **Company:** OpenRouter
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-28
- **Last confirmed live:** 2026-10-17
- **Apply:** https://jobs.ashbyhq.com/openrouter/a098411d-50ea-4650-8ff3-5c45ecb33871

## Job description

## About OpenRouter

OpenRouter is the leading AI routing and infrastructure layer that enterprises use to access, manage, and optimize the best large language models across providers—without lock-in, capacity constraints, or unnecessary cost. We power the most advanced AI teams in the world by giving them the flexibility to move fast, scale confidently, and stay future-proof as models evolve. As enterprise adoption of AI accelerates, OpenRouter sits at the center of how organizations operationalize LLMs across research, product, and production workloads.

## About the Role

You own our compliance program day to day. Drata and Safebase are yours. SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act are yours. You'll report to the Head of IT & Security, and you'll run the program with very little daily management. The controls are the easy part. The real work is getting an engineer mid-sprint to pull evidence, getting the whole company through training before the deadline, and doing it in a way that makes people take your next request seriously instead of ignoring it. If your ideal job is overseeing a program that someone else operates, this is not the role for you. We are looking for a strategic builder ready to roll up their sleeves. We also work in a space where the regulation is still being written. A meaningful share of what you'll face has no established playbook, and you'll be the person deciding what a novel requirement actually means for our business.

## What You'll Do

- Own Drata end to end — administration, integrations, monitoring test health, and the manual evidence collection automation doesn't reach.
- Curate the SafeBase knowledge base so sales can self-serve most customer security questionnaires — and be the escalation point for the ones they can't.
- Drive personnel compliance: policy acknowledgments, device compliance, and recurring security and compliance training. This means chasing people down and building the habit, not just running the report.
- Lead recurring ceremonies: user access reviews, penetration tests, BCDR and incident response tabletops, annual policy review and updates, risk assessments.
- Work directly with Engineering on product-related compliance questions, from data handling to customer commitments.
- Maintain audit readiness across SOC 2, HIPAA, PCI DSS, GDPR, CCPA, BIPA, and the EU AI Act.
- Translate emerging AI regulation into controls we can actually operate, rather than waiting for someone else's checklist.
- Partner with HR, Legal, Customer Support, and Finance so compliance fits into work that's already happening.

## What We're Looking For

- Several years in GRC or compliance, hands-on — you've built and run programs, not just governed them.
- At least one SOC 2 audit cycle owned end to end, evidence through fieldwork.
- Admin-level fluency in a compliance automation platform (Drata strongly preferred).
- Technical enough to hold a real conversation with engineers about architecture and data flows.
- Proven cross-functional influence without becoming the person everyone avoids.
- Comfortable when requirements shift and precedent doesn't exist.

## Nice to Have

- PCI DSS in a startup environment
- HIPAA as a Business Associate
- EU AI Act or other emerging AI regulation
- CISA, CISSP, or CIPP
- First compliance hire experience
- Scripting for evidence collection

If you don't think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box, and we're looking for someone who is excited to join the team.

## About OpenRouter

## Company Overview
- **One-liner**: OpenRouter provides a unified API that gives developers access to 400+ large language models from 70+ providers through a single interface.
- **Entity Type**: Private (Series B)
- **Headquarters**: New York, New York, United States
- **Founded**: 2023
- **Founders**: Alex Atallah (CEO, Co-Founder), Louis Vichy (Co-Founder)

## Core Business
- **Primary industry**: AI Infrastructure / Developer Tools
- **Target customers**: B2B — software developers, AI application builders, and enterprises building agentic and LLM-powered products.
- **Mission or purpose**: To be the unified interface for LLMs, helping developers build AI applications without worrying about provider lock-in, downtime, or complex integrations.

## Products & Services
- **Unified LLM API**: A single, OpenAI-compatible API endpoint that provides access to 400+ models from 70+ providers (OpenAI, Anthropic, Google, Meta, Mistral, etc.). Handles authentication, request routing, rate limiting, and automatic failover. Developers avoid managing separate API keys and billing relationships.
- **Enterprise Offering**: Custom data policies, fine-grained provider controls, and dedicated support for organizations that need data governance and compliance.
- **Model & App Rankings**: A public leaderboard and community hub for discovering top-performing models and AI applications built on the platform.

## Market Standing
- **Valuation**: Not publicly disclosed.
- **Key Metric**: Total funding of **$200M** across multiple rounds (Seed, Series A, Series B).
- **Latest Funding**: $120M venture round in April 2026.
- **Notable Investors**: Andreessen Horowitz, Menlo Ventures, Snowflake Ventures, ServiceNow Ventures, League of Generalists.
- **Growth Signals**: Processes **100 trillion tokens monthly**; serves **250k+ apps** and **4.2M+ global users**; headcount grew **+611% year-over-year** to 46 employees; LinkedIn followers grew **+871.9% year-over-year** to 14,754.

## Competitive Advantages
- **Provider Agnosticism**: Developers are not locked into a single provider; OpenRouter handles failover and routing across 70+ providers, ensuring high availability and resilience.
- **Cost Optimization**: Offers better prices than going direct to many providers, with no subscription fees — users simply buy credits.
- **Massive Model Selection**: 400+ models in one API, from frontier reasoning models to lightweight, cost-optimized options, enabling dynamic model selection per task.
- **OpenAI-Compatible SDK**: Drop-in replacement for existing OpenAI integrations, minimizing migration friction.

## Strategic Focus
- **Scaling Infrastructure**: Building distributed inference infrastructure to improve reliability and reduce latency for global users.
- **Enterprise Adoption**: Growing enterprise sales team and launching dedicated enterprise features (data policies, compliance controls).
- **Agentic Development**: Supporting the next wave of autonomous AI agents with robust routing, fallback, and observability.
- **Platform Expansion**: Growing the ecosystem of featured agents and apps built on OpenRouter.

## Why Work Here
- **Remote First**: Flexibility to work from anywhere in the US.
- **Small, High-Impact Team**: ~46 employees with a flat structure where every person has direct impact on the product and users.
- **Competitive Compensation**: Top-of-market salary and equity packages.
- **Health & Wellness**: Fully covered health, dental, and vision plans for you and your dependents.
- **WFH Budget**: Annual stipend for home office setup and internet.
- **Unlimited PTO**: Encouraged time off to recharge.
- **Quarterly Offsites**: Regular team gatherings to connect in person.
- **Engineering Culture**: High ownership, small team punching above its weight, building critical AI infrastructure at massive scale (100T tokens/month).

## Strategic Focus
- **Scaling Infrastructure**: Building distributed inference routing to improve reliability and reduce latency globally.
- **Enterprise Growth**: Expanding enterprise sales, security, and compliance features to serve larger organizations.
- **Agentic Ecosystem**: Supporting the next wave of autonomous AI agents with robust routing, fallback, and observability.
- **Platform Expansion**: Growing the marketplace of featured agents and apps, and deepening integrations with developer tools.

## Competitive Advantages
- **Provider Agnosticism**: Developers are not locked into a single provider; OpenRouter handles failover and routing across 70+ providers, ensuring high availability.
- **Cost Optimization**: Offers better prices than going direct to many providers, with no subscription fees — users simply buy credits.
- **Massive Model Selection**: 400+ models in one API, from frontier reasoning models to lightweight, cost-optimized options.
- **OpenAI-Compatible SDK**: Drop-in replacement for existing OpenAI integrations, minimizing migration friction.

## Why Work Here
- **Remote First**: Flexibility to work from anywhere in the US.
- **High Impact, Small Team**: ~46 employees, each with direct impact on the product and millions of users.
- **Competitive Compensation**: Top-of-market salary and equity packages.
- **Health & Wellness**: Fully covered health, dental, and vision plans for you and your dependents.
- **WFH Budget**: Annual stipend for home office setup and internet.
- **Unlimited PTO**: Encouraged time off to recharge.
- **Quarterly Offsites**: Regular team gatherings to connect in person.
- **Engineering Culture**: High ownership, small team punching above its weight, building critical AI infrastructure at massive scale.

## Sources
1. [openrouter.ai](https://openrouter.ai/)
2. [openrouter.ai/careers](https://openrouter.ai/careers)
3. [jobs.ashbyhq.com/openrouter](https://jobs.ashbyhq.com/openrouter/)
4. [cbinsights.com](https://www.cbinsights.com/company/openrouter)
5. [linkedin.com/company/openrouter](https://www.linkedin.com/company/openrouter)

## Other roles at OpenRouter

- [Site Reliability Engineer, Provider Operations](https://feeny.ai/job/site-reliability-engineer-provider-operations-openrouter-united-states-j18dk08e73e4) — United States
- [Customer Engineer, APAC](https://feeny.ai/job/customer-engineer-apac-openrouter-apac-1mra2rf7fwfw) — APAC
- [Business Development Representative, Enterprise](https://feeny.ai/job/business-development-representative-enterprise-openrouter-united-states-r9ksdb1qmwtj) — United States
- [IT Manager](https://feeny.ai/job/it-manager-openrouter-new-york-h4f8zd8xr9bm) — New York, NY
- [Software Engineer, Ori](https://feeny.ai/job/software-engineer-ori-openrouter-united-states-hhnpazwg5tmq) — United States
- [Product Marketing Manager, Enterprise](https://feeny.ai/job/product-marketing-manager-enterprise-openrouter-united-states-2q95fjg7keq8) — United States
- [Product Manager, OpenRouter Connect](https://feeny.ai/job/product-manager-openrouter-connect-openrouter-united-states-528m22mvv1h8) — United States
- [Engineering Manager, Provider Ecosystem](https://feeny.ai/job/engineering-manager-provider-ecosystem-openrouter-united-states-gyn2ks85jeq4) — United States
- [Software Engineer, Trust & Safety](https://feeny.ai/job/software-engineer-trust-safety-openrouter-united-states-5hgj3pzc4aa4) — United States
- [Solutions Architect](https://feeny.ai/job/solutions-architect-openrouter-united-states-qr713fthv7qn) — United States