Vendor Security Technical Program Manager
AI research and deployment company building and deploying frontier AI products, including ChatGPT, Codex, and its API platform.
Projects
About OpenAI
OpenAI’s mission is to ensure artificial general intelligence benefits all of humanity. It consists of the nonprofit OpenAI Foundation and OpenAI Group, a public benefit corporation governed by the Foundation.
Skills
Candidate Availability
About the Role
You'll independently lead vendor-security engagements from understanding the business need through assessment, decision, treatment and reassessment. You'll analyze architectures, data flows, access and controls, develop practical treatments, build reusable security patterns, and work with Legal and Procurement on security addenda. You'll also use Codex or similar AI tools to build workflow improvements and lead cross-functional delivery. This is an individual-contributor role.
Requirements
- Experience independently assessing third-party, supply-chain or comparable security risks
- Understanding of security principles and controls including data protection, access management, application security and detection and response
- Knowledge of ISO 27001, NIST 800-53 and SOC 2
- Experience translating security findings into contractual positions with Legal and Procurement
- Experience delivering products or workflow improvements
- Ability to use Codex or comparable AI-assisted development tools
- Experience delivering cross-functional programs
- Clear written and verbal communication
Responsibilities
- Own vendor security engagements from scoping to assessment, decision, treatment and reassessment
- Understand vendor use cases, data flows, identities, access, integrations and supply-chain dependencies
- Assess architectures, configurations, controls, logs and operational practices
- Develop and drive practical treatments and verify they work
- Build reusable security patterns
- Work with Legal, Procurement and vendors on security addenda
- Define requirements, roadmap and success measures for owned programs and tools
- Use Codex or comparable AI tools to build and maintain workflow improvements
- Lead delivery across Security and partner teams
- Use casework, incidents and feedback to improve the program
Benefits
- Equity
- Performance-related bonus
- Medical, dental, and vision insurance with HSA employer contributions
- Health FSA, Dependent Care FSA, and commuter pre-tax accounts
- 401(k) with employer match
- Paid parental leave, medical and caregiver leave
- Flexible PTO
- 13+ paid company holidays and office closures
- Mental health and wellness support
- Employer-paid life and disability coverage
- Learning and development stipend
- Daily meals and meal delivery credits
- Relocation support
- Charitable donation matching and wellness stipends
