Vendor Security Technical Program Manager

The job

LIVE Employer public job feed (private-sector employer) Source: the employer's public careers feed · Data: listed 2026-10-02

Job description

About the Team

OpenAI's Vendor Security team helps internal teams work securely with external products, services, and partners. Our work spans software, infrastructure, hardware, professional and managed services, vendor-provided workforces, data, and research. We build the programs and products that help teams understand vendor risk and put effective safeguards in place, protecting our customers, employees, and the company.

About the Role

We are looking for a Vendor Security Technical Program Manager who can make sound security decisions and turn recurring vendor-security problems into tools and practices that work.

You will independently lead vendor-security engagements: understand the business need, investigate the actual data and access, recommend a practical path, and work with the responsible owners until the safeguards are verified. You will also use what you learn to build and improve bounded tools and workflows, with priorities agreed with the Vendor Security lead.

This is an individual-contributor role for someone who combines technical judgment with useful delivery. You should be comfortable taking a position, explaining the tradeoff, and changing your mind when the evidence changes. Success means internal teams can use vendors securely, reuse work that still applies, and understand what needs to happen next.

In this role, you will:

• Own vendor security engagements from understanding the business need through scoping, assessment, decision, treatment, and reassessment when material facts change. Make assessment decisions independently and use judgment about when to involve peers, specialists, or leadership. Route formal exceptions and risk acceptance to the appropriate decision owners.

• Understand vendor use cases, workflows, user journeys, data flows, identities, access, integrations, and supply-chain dependencies. Identify plausible attack paths and their consequences for OpenAI.

• Assess relevant architectures, configurations, controls, logs, and operational practices. Test whether the evidence supports the security claims that matter to the engagement, and make gaps and uncertainty clear.

• Develop practical treatments, including changes to the operating model, data exposure, access, architecture, vendor choice, controls, or containment. Drive implementation with the responsible owners and verify that the treatment works.

• Build reusable security patterns with clear applicability, safeguards, evidence requirements, exceptions, and review triggers.

• Work with Legal, Procurement, and vendors on security addenda. Evaluate proposed terms and deviations against the engagement, explain their security implications, and develop workable positions with the appropriate decision owners. Legal leads wording and negotiation.

• Learn from internal customers, agree priorities with the Vendor Security lead, and define the requirements, roadmap, and success measures for the bounded programs, products, and services you own.

• Use Codex or comparable AI-assisted tools to build, inspect, test, and maintain practical improvements to scoping, evidence checks, routing, decision reuse, or treatment tracking. Investigate failures and own the result through adoption, continued operation, and explicit handoff or retirement.

• Lead delivery across Security and partner teams. Translate goals into technical requirements, milestones, and delivery plans; influence implementation choices; identify systemic risks; resolve dependencies and disagreements; and carry commitments through completion.

• Use casework, incidents, threat information, and customer feedback to improve decisions and the program. As priorities change, recommend what to do next and explain the tradeoffs and effects on existing commitments.

You might thrive in this role if you:

• Have independently assessed consequential third-party, supply-chain, or comparable security risks, and can apply that judgment to unfamiliar vendor technologies and operating models.

• Understand security principles and controls, including data protection, access management, application security, prevention, detection, and response. Can reason about architecture, identity, APIs, data flows, logging, integrations, and whether controls work.

• Know relevant frameworks and standards, including ISO 27001, NIST 800-53, and SOC 2, and can use them to inform an assessment of the actual engagement.

• Have translated security findings and requirements into practical contractual positions with Legal, Procurement, and vendor representatives.

• Have delivered useful products or workflow improvements, tested expected behavior and failure cases, learned from users, and owned performance after launch.

• Can use Codex or comparable AI-assisted development tools to build, run, inspect, and test working solutions.

• Have independently delivered cross-functional programs, turned ambiguity into technical requirements and plans, and adapted priorities to achieve measurable outcomes. Can judge when to build, use existing systems, or engage partners to resolve blockers.

• Build constructive relationships with Security, Engineering, Product, Privacy, Legal, business teams, and vendors. Communicate complex security issues clearly in writing and conversation, including your recommendation, supporting evidence, and relevant tradeoffs.

• Question assumptions, try thoughtful new approaches, investigate unfamiliar systems, and revise your judgment when new evidence changes the situation.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. 

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.

For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement.

Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.

To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form. No response will be provided to inquiries unrelated to job posting compliance.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link.

OpenAI Global Applicant Privacy Policy

At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

Explore around this job

Field: Operations and Management Sub-niche: Program management All jobs at OpenAI

View this job and apply on the employer's page →

You apply on the employer's page; AtiveSite does not receive or process applications and is not affiliated with the employer. The description above is shown as the source published it.

About the role

This is a — role in the Operations and Management field (Program management) at OpenAI.

We could not match this job title to one occupation in the official wage statistics, so no pay estimate is shown. Pay is not in the source listing; ask the employer for the range and compare in the 240 job niches.

How to prepare and behave

This is editorial guidance, not information from the employer.

• Read the whole description and match your examples to its requirements; use the same words the posting uses where they are true for you.
• Research the employer before the interview: what it does, who its customers are and recent news; prepare two or three questions about the work.
• Arrive early (or log in early for a video call), dress one step above the daily dress code, and test your camera and audio beforehand.
• Answer with short stories: the situation, what you did and the result. Give numbers when you have them and never invent them.
• Be honest about gaps; say what you did to learn and how fast you can close them.
• Ask about the team, the first 90 days, how success is measured and the schedule; do not open with salary and time off.
• When pay comes up, know the market range for the occupation and your lowest acceptable offer before you answer; ask for the full package in writing.
• Send a short thank-you message within a day, mentioning one thing you discussed.
• The listing mentions a remote or flexible location. Confirm with the employer whether remote work applies to your state: taxes, licensing and benefits can depend on where you live.

Know your rights as a candidate and an employee:

• U.S. Equal Employment Opportunity Commission: prohibited employment practices
• U.S. Department of Labor: Wage and Hour Division
• CareerOneStop (U.S. Department of Labor): job search help, interview tips and resumes
• USA.gov: avoiding job scams

The city

The listing is remote or has no US state we could identify. Read the country guide for pay, taxes, law and cost of living by state.

Where to live

The job city has no coordinates we can place on the map, so no housing comparison is shown. Use the 250 largest cities table to compare rent and income.

Career paths

We could not match this title to one occupation, so here are the other sub-niches in Operations and Management, where your skills may carry over:

Project management (250) Supply chain and logistics (627) Business operations and strategy (1712) Executive and general management (2106)

Distances

This job has no single city we can place on the map (remote, flexible or unmatched location), so no distance table is shown. Browse all Operations and Management jobs with distances from any of the 20 largest cities.

The employer

OpenAI is the employer in this listing. See all its open jobs here →

We do not hold headcount or revenue for this employer. Check its careers site and, if it is listed on a stock exchange, its public filings (SEC EDGAR search).

What it is like to work at a company (culture, schedules, benefits) is not in the source data, so we do not describe it. Read the description and ask the questions under "How to prepare".

Other open jobs at OpenAI

Similar jobs

Same sub-niche: Program management

All Program management jobs → · All Operations and Management sub-niches →

FAQ

What is the Vendor Security Technical Program Manager job at OpenAI?

A private-sector role in operations and management (program management) listed 38 days ago. The full description is on this page and on the employer's page.

Where is this job?

Remote / flexible (United States). A remote or flexible location is listed; confirm with the employer which states are accepted.

How do I apply?

Use the "View this job and apply on the employer's page" button. AtiveSite does not receive applications.

How much does it pay?

The listing does not publish pay, and we could not match the title to one official occupation.

What is the cost of living there?

See the state or country guide for rent, income and taxes.

How old is this listing?

It was posted on 2026-10-02 (38 days ago). Jobs older than 90 days are not shown.

Are there similar jobs?

Yes: browse program management jobs in the United States.

Sources and terms

• Job data: OpenAI careers page public feed (listing dated 2026-10-02). The job disappears from this site when it disappears from the source.
• Wages and projections: BLS OEWS (May 2025) and Employment Projections 2025–35.
• City and county figures: Census Bureau ACS 2020–2024, BEA, BLS QCEW and LAUS, NASA POWER climatology; distances from Census Gazetteer coordinates.

AtiveSite is not affiliated with or endorsed by the employer or any government agency, and does not process applications. Verify every detail with the employer before acting.

Sources

• BLS OEWS (wages and employment by occupation, May 2025)
• BLS Employment Projections 2025–35
• BLS Local Area Unemployment Statistics
• BLS JOLTS
• BLS State and Metro Area Employment
• Census Bureau American Community Survey (via Census Reporter)
• BEA GDP by state and Regional Price Parities
• IRS 2026 tax adjustments
• U.S. Department of Labor, minimum wage by state
• Tax Foundation state income tax rates 2026
• USAJOBS
• USCIS
• U.S. Department of State, visas
• NASA POWER climatology
• GeoNames / Census Gazetteer (coordinates)