---
title: 'Third-Party Risk Analyst at OpenRouter'
canonical: 'https://feeny.ai/job/third-party-risk-analyst-openrouter-united-states-yz8rjkff2wd2'
type: 'job'
last_seen: '2026-09-12'
---

# Third-Party Risk Analyst at OpenRouter

- **Company:** OpenRouter
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-08-11
- **Last confirmed live:** 2026-09-12
- **Apply:** https://jobs.ashbyhq.com/openrouter/99aa680f-19e2-49f1-acd5-b56c4aaa679f

## Job description

## About OpenRouter

OpenRouter is the AI routing and infrastructure layer that AI builders, AI-native startups, and enterprises use to access, manage, and optimize their AI usage through a unified API, billing interface, and analytics platform. We route billions of tokens every month and sit at the center of how organizations operationalize LLMs across research, product, and production workloads. We are a small team that punches above its weight. Every person here has direct impact on the product and our users.

## About the Role

Most third-party risk roles hand you a mature program and ask you to keep the queue moving. This is the opposite.

You'll be the first security risk analyst at OpenRouter, building the vendor risk function from a blank page. The vendors you assess aren't the usual SaaS sprawl — they're the model providers and subprocessors sitting directly in our customers' data path. And you'll do it in a regulatory environment still being written: there's no playbook for how the EU AI Act applies to an AI routing layer and its supply chain. You'll help write ours.

If you've ever finished a vendor review and thought this should take a third as long and catch twice as much — and wanted to be the one to fix it — keep reading.

## What You'll Do

- Own end-to-end security assessments for model providers, subprocessors, and SaaS tooling — and get vendors live without becoming the bottleneck.
- Read SOC 2 and ISO reports critically: scope, carve-outs, CUECs, exceptions, and whether the testing supports the opinion. Same for pen tests, DPAs, and subprocessor lists.
- Turn findings into decisions — residual risk and compensating controls, not a spreadsheet of yellow cells.
- Design and stand up the TPRM program: intake, tiering, SLAs, escalation, exceptions, and risk acceptance.
- Pitch and implement tooling that compresses time-to-close, integrated with our GRC stack (Drata) and ticketing.
- Build continuous monitoring for critical vendors and run annual reviews on a real cadence.
- Map vendor risk to our SOC 2, ISO 27001, HIPAA, GDPR, and EU AI Act obligations, including flow-down to subprocessors.

## What We're Looking For

- 4+ years in third-party/vendor security risk or security assessment — real assessment reps, not just program administration.
- Working fluency across SOC 2, ISO 27001, HIPAA, and GDPR, plus enough command of the EU AI Act to reason about it rather than recite it.
- Technical literacy — cloud architecture, access models, encryption, data flows — enough to know when a vendor's answer doesn't hold up.
- Comfort with DPAs, BAAs, and security exhibits, and judgment about which clauses actually matter.
- A bias toward shipping. You'll pitch solutions and drive implementation yourself; nobody is going to manage your day.
- Clear writing and a high tolerance for ambiguity. When the precedent doesn't exist, you write the memo.

## Nice to Have

- Experience assessing AI/ML vendors or inference infrastructure
- ISO 42001 or NIST AI RMF
- Scripting and automation to eliminate your own toil
- GRC platform administration (Drata, Vanta, or similar)
- Time at an early-stage startup where you built the function rather than joined it
- CISSP, CISA, CRISC, or CTPRP.

If you don't think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box, and we're looking for someone who is excited to join the team.

## About OpenRouter

## Company Overview
- **One-liner**: OpenRouter provides a unified API that gives developers access to 400+ large language models from 70+ providers through a single interface.
- **Entity Type**: Private (Series B)
- **Headquarters**: New York, New York, United States
- **Founded**: 2023
- **Founders**: Alex Atallah (CEO, Co-Founder), Louis Vichy (Co-Founder)

## Core Business
- **Primary industry**: AI Infrastructure / Developer Tools
- **Target customers**: B2B — software developers, AI application builders, and enterprises building agentic and LLM-powered products.
- **Mission or purpose**: To be the unified interface for LLMs, helping developers build AI applications without worrying about provider lock-in, downtime, or complex integrations.

## Products & Services
- **Unified LLM API**: A single, OpenAI-compatible API endpoint that provides access to 400+ models from 70+ providers (OpenAI, Anthropic, Google, Meta, Mistral, etc.). Handles authentication, request routing, rate limiting, and automatic failover. Developers avoid managing separate API keys and billing relationships.
- **Enterprise Offering**: Custom data policies, fine-grained provider controls, and dedicated support for organizations that need data governance and compliance.
- **Model & App Rankings**: A public leaderboard and community hub for discovering top-performing models and AI applications built on the platform.

## Market Standing
- **Valuation**: Not publicly disclosed.
- **Key Metric**: Total funding of **$200M** across multiple rounds (Seed, Series A, Series B).
- **Latest Funding**: $120M venture round in April 2026.
- **Notable Investors**: Andreessen Horowitz, Menlo Ventures, Snowflake Ventures, ServiceNow Ventures, League of Generalists.
- **Growth Signals**: Processes **100 trillion tokens monthly**; serves **250k+ apps** and **4.2M+ global users**; headcount grew **+611% year-over-year** to 46 employees; LinkedIn followers grew **+871.9% year-over-year** to 14,754.

## Competitive Advantages
- **Provider Agnosticism**: Developers are not locked into a single provider; OpenRouter handles failover and routing across 70+ providers, ensuring high availability and resilience.
- **Cost Optimization**: Offers better prices than going direct to many providers, with no subscription fees — users simply buy credits.
- **Massive Model Selection**: 400+ models in one API, from frontier reasoning models to lightweight, cost-optimized options, enabling dynamic model selection per task.
- **OpenAI-Compatible SDK**: Drop-in replacement for existing OpenAI integrations, minimizing migration friction.

## Strategic Focus
- **Scaling Infrastructure**: Building distributed inference infrastructure to improve reliability and reduce latency for global users.
- **Enterprise Adoption**: Growing enterprise sales team and launching dedicated enterprise features (data policies, compliance controls).
- **Agentic Development**: Supporting the next wave of autonomous AI agents with robust routing, fallback, and observability.
- **Platform Expansion**: Growing the ecosystem of featured agents and apps built on OpenRouter.

## Why Work Here
- **Remote First**: Flexibility to work from anywhere in the US.
- **Small, High-Impact Team**: ~46 employees with a flat structure where every person has direct impact on the product and users.
- **Competitive Compensation**: Top-of-market salary and equity packages.
- **Health & Wellness**: Fully covered health, dental, and vision plans for you and your dependents.
- **WFH Budget**: Annual stipend for home office setup and internet.
- **Unlimited PTO**: Encouraged time off to recharge.
- **Quarterly Offsites**: Regular team gatherings to connect in person.
- **Engineering Culture**: High ownership, small team punching above its weight, building critical AI infrastructure at massive scale (100T tokens/month).

## Strategic Focus
- **Scaling Infrastructure**: Building distributed inference routing to improve reliability and reduce latency globally.
- **Enterprise Growth**: Expanding enterprise sales, security, and compliance features to serve larger organizations.
- **Agentic Ecosystem**: Supporting the next wave of autonomous AI agents with robust routing, fallback, and observability.
- **Platform Expansion**: Growing the marketplace of featured agents and apps, and deepening integrations with developer tools.

## Competitive Advantages
- **Provider Agnosticism**: Developers are not locked into a single provider; OpenRouter handles failover and routing across 70+ providers, ensuring high availability.
- **Cost Optimization**: Offers better prices than going direct to many providers, with no subscription fees — users simply buy credits.
- **Massive Model Selection**: 400+ models in one API, from frontier reasoning models to lightweight, cost-optimized options.
- **OpenAI-Compatible SDK**: Drop-in replacement for existing OpenAI integrations, minimizing migration friction.

## Why Work Here
- **Remote First**: Flexibility to work from anywhere in the US.
- **High Impact, Small Team**: ~46 employees, each with direct impact on the product and millions of users.
- **Competitive Compensation**: Top-of-market salary and equity packages.
- **Health & Wellness**: Fully covered health, dental, and vision plans for you and your dependents.
- **WFH Budget**: Annual stipend for home office setup and internet.
- **Unlimited PTO**: Encouraged time off to recharge.
- **Quarterly Offsites**: Regular team gatherings to connect in person.
- **Engineering Culture**: High ownership, small team punching above its weight, building critical AI infrastructure at massive scale.

## Sources
1. [openrouter.ai](https://openrouter.ai/)
2. [openrouter.ai/careers](https://openrouter.ai/careers)
3. [jobs.ashbyhq.com/openrouter](https://jobs.ashbyhq.com/openrouter/)
4. [cbinsights.com](https://www.cbinsights.com/company/openrouter)
5. [linkedin.com/company/openrouter](https://www.linkedin.com/company/openrouter)

## Other roles at OpenRouter

- [Enterprise Support Engineer (West Coast)](https://feeny.ai/job/enterprise-support-engineer-west-coast-openrouter-united-states-gxr6zg59bhm7) — United States
- [Strategic Account Executive](https://feeny.ai/job/strategic-account-executive-openrouter-united-states-140am3chk0r0) — United States
- [Community Lead, Developer Relations](https://feeny.ai/job/community-lead-developer-relations-openrouter-san-francisco-bay-area-5jz0m5q2grgm) — San Francisco Bay Area, CA
- [Data Scientist](https://feeny.ai/job/data-scientist-openrouter-united-states-4aqxa5hkcdbc) — United States
- [Customer Engineer](https://feeny.ai/job/customer-engineer-openrouter-united-states-sk54wh1a5gjp) — United States
- [Director, Revenue Operations](https://feeny.ai/job/director-revenue-operations-openrouter-united-states-ymhde7q5cbds) — United States
- [Program Manager, Provider Partnerships](https://feeny.ai/job/program-manager-provider-partnerships-openrouter-united-states-2tgpwwh62d9z) — United States
- [Partner Development Manager, Provider Ecosystem](https://feeny.ai/job/partner-development-manager-provider-ecosystem-openrouter-united-states-7sdqaz37f4f8) — United States
- [Business Development Representative](https://feeny.ai/job/business-development-representative-openrouter-united-states-z4gve8eqs39v) — United States
- [Senior Manager, Product Partnerships](https://feeny.ai/job/senior-manager-product-partnerships-openrouter-united-states-v4bx563t08j7) — United States