Skip to content

GRC

Software Engineer, Privacy Engineering (Lawful Access)

OpenAI logoOpenAI$347,000–$385,000/yrSan FranciscoFull-timePosted 3w ago

At its midpoint, $366k/yr, this role pays more than the $168k/yr midpoint for Governance, Risk & Compliance (GRC) openings today (usual band $136k–$300k/yr).

The full posting

About the Team

The Privacy Engineering team builds secure, reliable systems that help OpenAI meet its legal obligations while protecting user data. We partner closely with Legal and engineering teams across OpenAI to support lawful data access requests and other critical legal workflows. Our work turns complex, high-stakes processes into auditable and dependable technical systems with clear human oversight and strong privacy and security controls.

About the Role

We’re looking for a full-stack Software Engineer to build the internal tools and data pipelines that power lawful data access request workflows and Legal Operations. You will work across product and data systems to make authorized retrieval and case handling accurate, efficient, and auditable. This role is well suited to someone who enjoys translating ambiguous operational requirements into durable systems, cares deeply about sensitive-data handling, and wants to improve both technical reliability and the day-to-day experience of the people operating these workflows.

In this role, you will

  • Design, build, and operate backend systems and workflow tooling for the full lifecycle of lawful data access requests, from intake and scoping through authorized retrieval, review, preparation, and audit.
  • Build reliable data pipelines and interfaces across products and data stores so authorized teams can locate and handle the right records accurately and reproducibly.
  • Implement least-privilege access, approval gates, provenance, audit trails, data minimization, and safe failure modes for sensitive workflows.
  • Partner with Legal and Legal Operations to translate legal and operational requirements into clear technical designs and intuitive operator experiences.
  • Identify responsible automation opportunities that reduce repetitive work while preserving human review, judgment, and accountability.
  • Own production systems through testing, observability, incident response, documentation, and continuous reliability improvements.
  • Help define the architecture and roadmap for reusable privacy and legal-infrastructure foundations as OpenAI’s products and obligations evolve.

You might thrive in this role if you

  • Have experience building or operating systems for lawful data access requests and understand the domain’s legal-process lifecycle, privacy and security constraints, auditability requirements, and operational sensitivities.
  • Strong backend engineering fundamentals and experience building production services or data-intensive systems.
  • Ability to reason carefully about correctness, authorization, security, and privacy when working with sensitive data.
  • A track record of turning ambiguous requirements into pragmatic plans and communicating technical tradeoffs clearly.
  • End-to-end ownership, including operating what you build, and comfort learning unfamiliar products and domains.
  • Care for operator experience and a drive to make complex workflows safer, clearer, and more efficient.
  • Experience collaborating across Engineering, Legal, operations, Privacy, and Security stakeholders.
  • Are curious about using AI tools and agents to improve engineering workflows for privacy-sensitive systems.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.

For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement .

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.

To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form . No response will be provided to inquiries unrelated to job posting compliance.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link .

OpenAI Global Applicant Privacy Policy

At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

Text as OpenAI published it; last compared with the original on 13 Nov 2026.

The application

Your details and CV, then 5 questions.

Keep these to handCVCover letter (optional)
  1. 1.
    When can you start a new role?Date
  2. 2.
    Are you authorized to work in the country where the job is located?Yes or no
  3. 3.
    Will you now or in the future require sponsorship for employment visa status in this country?Yes or no
  4. 4.
    Are you able to work from our US office three days per week?Yes or no
  5. 5.
    I hereby certify that I have not knowingly withheld any information that might adversely affect my chances for employment and that the answers given by me are true and correct to the best of my knowledge. I further certify that I, the underChoose any: I confirm I have read the above.

Taken from OpenAI's application form as it stood on 13 Nov 2026.

The employer: OpenAI

Develops the GPT models and ChatGPT; its security engineers defend infrastructure, harden agent products and investigate threat actors misusing its models.

Pay and benefits: Salaried full-time roles with equity, which OpenAI grants widely to staff.

Other security roles worth a look

A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when OpenAI posts a security role

We read OpenAI's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.