--- title: 'Vendor Security Technical Program Manager at OpenAI' canonical: 'https://feeny.ai/job/vendor-security-technical-program-manager-openai-united-states-6vqv513jgr3y' type: 'job' last_seen: '2026-10-15' --- # Vendor Security Technical Program Manager at OpenAI - **Company:** [OpenAI](https://feeny.ai/companies/openai) - **Location:** United States - **Compensation:** $257k–$285k - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-02 - **Last confirmed live:** 2026-10-15 - **Apply:** https://jobs.ashbyhq.com/openai/3ae71c21-60dd-42b2-a913-58df05988976 ## Job description ## About the Team OpenAI's Vendor Security team helps internal teams work securely with external products, services, and partners. Our work spans software, infrastructure, hardware, professional and managed services, vendor-provided workforces, data, and research. We build the programs and products that help teams understand vendor risk and put effective safeguards in place, protecting our customers, employees, and the company. ## About the Role We are looking for a Vendor Security Technical Program Manager who can make sound security decisions and turn recurring vendor-security problems into tools and practices that work. You will independently lead vendor-security engagements: understand the business need, investigate the actual data and access, recommend a practical path, and work with the responsible owners until the safeguards are verified. You will also use what you learn to build and improve bounded tools and workflows, with priorities agreed with the Vendor Security lead. This is an individual-contributor role for someone who combines technical judgment with useful delivery. You should be comfortable taking a position, explaining the tradeoff, and changing your mind when the evidence changes. Success means internal teams can use vendors securely, reuse work that still applies, and understand what needs to happen next. In this role, you will: - Own vendor security engagements from understanding the business need through scoping, assessment, decision, treatment, and reassessment when material facts change. Make assessment decisions independently and use judgment about when to involve peers, specialists, or leadership. Route formal exceptions and risk acceptance to the appropriate decision owners. - Understand vendor use cases, workflows, user journeys, data flows, identities, access, integrations, and supply-chain dependencies. Identify plausible attack paths and their consequences for OpenAI. - Assess relevant architectures, configurations, controls, logs, and operational practices. Test whether the evidence supports the security claims that matter to the engagement, and make gaps and uncertainty clear. - Develop practical treatments, including changes to the operating model, data exposure, access, architecture, vendor choice, controls, or containment. Drive implementation with the responsible owners and verify that the treatment works. - Build reusable security patterns with clear applicability, safeguards, evidence requirements, exceptions, and review triggers. - Work with Legal, Procurement, and vendors on security addenda. Evaluate proposed terms and deviations against the engagement, explain their security implications, and develop workable positions with the appropriate decision owners. Legal leads wording and negotiation. - Learn from internal customers, agree priorities with the Vendor Security lead, and define the requirements, roadmap, and success measures for the bounded programs, products, and services you own. - Use Codex or comparable AI-assisted tools to build, inspect, test, and maintain practical improvements to scoping, evidence checks, routing, decision reuse, or treatment tracking. Investigate failures and own the result through adoption, continued operation, and explicit handoff or retirement. - Lead delivery across Security and partner teams. Translate goals into technical requirements, milestones, and delivery plans; influence implementation choices; identify systemic risks; resolve dependencies and disagreements; and carry commitments through completion. - Use casework, incidents, threat information, and customer feedback to improve decisions and the program. As priorities change, recommend what to do next and explain the tradeoffs and effects on existing commitments. You might thrive in this role if you: - Have independently assessed consequential third-party, supply-chain, or comparable security risks, and can apply that judgment to unfamiliar vendor technologies and operating models. - Understand security principles and controls, including data protection, access management, application security, prevention, detection, and response. Can reason about architecture, identity, APIs, data flows, logging, integrations, and whether controls work. - Know relevant frameworks and standards, including ISO 27001, NIST 800-53, and SOC 2, and can use them to inform an assessment of the actual engagement. - Have translated security findings and requirements into practical contractual positions with Legal, Procurement, and vendor representatives. - Have delivered useful products or workflow improvements, tested expected behavior and failure cases, learned from users, and owned performance after launch. - Can use Codex or comparable AI-assisted development tools to build, run, inspect, and test working solutions. - Have independently delivered cross-functional programs, turned ambiguity into technical requirements and plans, and adapted priorities to achieve measurable outcomes. Can judge when to build, use existing systems, or engage partners to resolve blockers. - Build constructive relationships with Security, Engineering, Product, Privacy, Legal, business teams, and vendors. Communicate complex security issues clearly in writing and conversation, including your recommendation, supporting evidence, and relevant tradeoffs. - Question assumptions, try thoughtful new approaches, investigate unfamiliar systems, and revise your judgment when new evidence changes the situation. ## About OpenAI OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see [OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement](https://cdn.openai.com/policies/eeo-policy-statement.pdf). Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations. To notify OpenAI that you believe this job posting is non-compliant, please submit a report through [this form](https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA). No response will be provided to inquiries unrelated to job posting compliance. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this [link](https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241). [OpenAI Global Applicant Privacy Policy](https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf) At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology. ## About OpenAI ## Company Overview - **One-liner**: OpenAI is an AI research and deployment company with a mission to ensure that artificial general intelligence (AGI) benefits all of humanity. - **Entity Type**: Private – structured as a nonprofit parent (OpenAI Foundation) governing a for-profit public benefit corporation (OpenAI Group). The company has confidentially submitted a draft S-1 registration statement to the SEC, signaling a potential future IPO. - **Headquarters**: San Francisco, California, USA - **Founded**: 2015 - **Founders**: Sam Altman, Greg Brockman, Ilya Sutskever, John Schulman, Wojciech Zaremba, and others ## Core Business - **Primary industry**: Artificial intelligence research and deployment - **Target customers**: B2B (enterprises via API and platform), B2C (ChatGPT users), and developers (API, open-source models) - **Mission**: To ensure that artificial general intelligence (AGI) – AI systems that are generally smarter than humans – benefits all of humanity. ## Products & Services - **[ChatGPT](https://openai.com/chatgpt)**: Conversational AI assistant available via web and mobile, used by consumers and integrated into enterprise workflows. - **[GPT-4 API](https://openai.com/product)**: Large language model accessed via API for developers to build AI-powered applications (text generation, summarization, code assistance, etc.). - **[DALL-E](https://openai.com/dall-e-3)**: Image generation model that creates images from natural language descriptions. - **[Whisper](https://openai.com/research/whisper)**: Open-source speech recognition system. - **[OpenAI Agents](https://openai.com/)**: Emerging product category focused on autonomous AI agents that can perform tasks on behalf of users (announced June 2026). ## Market Standing - **Valuation**: Not publicly disclosed in the provided sources. Widely reported in the press at ~$300 billion as of early 2026 (post-funding round), but this figure is not confirmed by OpenAI’s official materials. - **Key Metric**: Total funding exceeds $13 billion from Microsoft and other investors. The company has also confidentially filed a draft S-1 with the SEC (see [openai.com](https://openai.com/) – “Confidential submission of draft S-1”). - **Notable Investors/Partners**: Microsoft (strategic partner and largest investor), with additional participation from Thrive Capital, Sequoia Capital, Andreessen Horowitz, and others. - **Growth Signals**: Active hiring with 721 open roles posted; expansion into agent-based products; confidential IPO filing; continued deployment of frontier models. ## Competitive Advantages - **First-mover & brand recognition**: ChatGPT became the fastest-growing consumer app in history, establishing OpenAI as the household name in generative AI. - **Research leadership**: Consistently publishes cutting-edge research (GPT-4, DALL-E 3, Whisper, etc.) and attracts top AI talent. - **Compute & infrastructure**: Exclusive partnership with Microsoft provides massive cloud computing resources (Azure) for training and inference. - **Unique governance structure**: The nonprofit parent ensures mission alignment (AGI benefiting humanity) while the for-profit arm can raise capital and scale products. ## Strategic Focus - **Safe AGI development**: Continued emphasis on safety research, alignment, and responsible deployment (e.g., safety systems, model provenance). - **Enterprise expansion**: Growing ChatGPT Enterprise and API offerings for businesses. - **Agentic AI**: Building autonomous agents that can “transform work” (announced June 2026). - **IPO preparation**: Confidential S-1 filing indicates intent to go public, which will require increased financial transparency and governance maturity. ## Why Work Here - **Culture & values**: OpenAI’s stated values include “Humanity first,” “Act with humility,” “Feel the AGI,” and “Ship joy.” Operating principles emphasize agency, creativity, rapid iteration, and intense focus. - **Benefits**: Competitive health insurance, mental healthcare support, 24-week paid birth-parent leave (plus 20 weeks for other parents), generous PTO, annual learning & development stipend, daily meals (breakfast, lunch, dinner), and a domestic conference budget. - **Work environment**: Hybrid/office-based (San Francisco headquarters). The company offers a residency program for researchers and engineers transitioning into AI. - **Impact**: Employees work directly on frontier AI models that shape the industry and society. The mission-driven nature attracts talent passionate about AGI’s societal implications. ## Sources 1. [OpenAI About Page](https://openai.com/about/) 2. [OpenAI Careers Page](https://openai.com/careers/) 3. [OpenAI Job Search](https://openai.com/careers/search) 4. [OpenAI Homepage](https://openai.com/) ## Other roles at OpenAI - [Strategy & Operations Lead — SEA & ANZ](https://feeny.ai/job/strategy-operations-lead-sea-anz-openai-singapore-a6pm94k6qqsy) — Singapore - [Client Platform Engineer](https://feeny.ai/job/client-platform-engineer-openai-san-francisco-pat12pc927cq) — San Francisco, CA - [Enterprise Security Engineer, Vulnerability Management](https://feeny.ai/job/enterprise-security-engineer-vulnerability-management-openai-san-francisco-h3ej6emmjazm) — San Francisco, CA - [Marketplace Lead](https://feeny.ai/job/marketplace-lead-openai-new-york-fhs68bg43ftx) — New York, NY - [B2B Ecosystem Lead, Business Development](https://feeny.ai/job/b2b-ecosystem-lead-business-development-openai-san-francisco-y31vpy889d0y) — San Francisco, CA - [Applied AI Engineer, Startups](https://feeny.ai/job/applied-ai-engineer-startups-openai-sao-paulo-wgjmry3b90sn) — São Paulo, Brazil - [Experiential Producer](https://feeny.ai/job/experiential-producer-openai-san-francisco-43m6e9w9k2rh) — San Francisco, CA - [Creative Director, Art](https://feeny.ai/job/creative-director-art-openai-san-francisco-m9ce3hvapsfz) — San Francisco, CA - [Motion Designer, Business Marketing](https://feeny.ai/job/motion-designer-business-marketing-openai-san-francisco-gtbt12733436) — San Francisco, CA - [Creative Delivery Director, Business Marketing](https://feeny.ai/job/creative-delivery-director-business-marketing-openai-san-francisco-vb9j81xmyyph) — San Francisco, CA