Vendor Security Technical Program Manager
OpenAI · Remote · US - Remote · Seattle · San Francisco ·
COMPENSATION
$257k – $285k
Listed on the employer's job board (Ashby)
- Fully remote
- Vendor Security focus
- Technical Program Manager
- Individual contributor
- AI-assisted tooling
Join the Vendor Security team at OpenAI to help internal groups work securely with external partners. You will manage end-to-end security engagements, from scoping business needs to verifying safeguards, while turning recurring issues into scalable tools and practices.
What you'll do
- Own vendor security engagements from scoping and assessment to treatment and reassessment
- Analyze vendor use cases, data flows, identities, and supply-chain dependencies for risks
- Assess architectures, controls, and logs to verify security claims and identify gaps
- Develop practical treatments such as access changes, architecture updates, or containment
- Build reusable security patterns with clear applicability and evidence requirements
- Collaborate with Legal and Procurement on security addenda and contractual terms
- Use AI-assisted tools to build and maintain improvements for scoping and tracking
- Translate security goals into technical requirements and drive cross-functional delivery
What you'll need
- Experience independently assessing third-party or supply-chain security risks
- Strong understanding of security controls including access management and app security
- Knowledge of frameworks like ISO 27001, NIST 800-53, and SOC 2
- Ability to translate security findings into practical contractual positions
- Experience delivering products or workflow improvements and owning post-launch performance
- Proficiency with Codex or similar AI-assisted development tools
- Proven track record in delivering cross-functional programs and managing ambiguity
- Strong communication skills for explaining complex security issues and tradeoffs
Stack
- Codex
- ISO 27001
- NIST 800-53
- SOC 2