Vendor Security Technical Program Manager

The role

You will lead vendor security engagements by assessing risks, recommending practical paths, and implementing safeguards. You will also build and improve security tools, workflows, and reusable patterns.

What you will do

• Own vendor security engagements from scoping to reassessment.
• Understand vendor use cases, workflows, data flows, and supply-chain dependencies.
• Assess architectures, configurations, controls, logs, and operational practices.
• Develop and implement practical security treatments.
• Build reusable security patterns.
• Work with Legal and Procurement on security addenda.
• Define requirements, roadmaps, and success measures for programs and products.
• Use AI-assisted tools to build and maintain improvements to security processes.
• Lead delivery across Security and partner teams.
• Use casework and threat information to improve decisions and the program.

Required qualifications

• Independently assessed consequential third-party, supply-chain, or comparable security risks.
• Understand security principles and controls including data protection, access management, application security, prevention, detection, and response.
• Can reason about architecture, identity, APIs, data flows, logging, and integrations.
• Know relevant frameworks and standards including ISO 27001, NIST 800-53, and SOC 2.
• Have translated security findings and requirements into practical contractual positions.
• Have delivered useful products or workflow improvements.
• Can use Codex or comparable AI-assisted development tools.
• Have independently delivered cross-functional programs.

Before you apply

• Background checks for applicants will be administered in accordance with applicable law.

About the company

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity.