Remote Vendor Security TPM: Build Safer Vendor Workflows

OpenAI, Inc.; United States; Remote; USD 231,000 - 257,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer match

Paid parental leave

Flexible PTO and holidays

Relocation assistance

Mental health support

Equity

Job summary

OpenAI is seeking a Vendor Security Technical Program Manager to lead security engagements with external vendors and partners. You will scope engagements, assess data flows and access, and drive risk-based treatments with the responsible owners.

You will build reusable security patterns, collaborate with Legal, Procurement, and vendors, and leverage Codex or similar AI-assisted tools to enhance scoping, evidence checks, and track treatments. This role is remote for US-based candidates.

Qualifications

• Experience leading third-party security engagements.
• Ability to translate security findings into contractual positions.
• Proven delivery of security programs with measurable outcomes.

Responsibilities

• Lead vendor-security engagements end-to-end from scoping to reassessment.
• Analyze vendor use cases, data flows, access, and supply-chain dependencies.
• Assess architectures, controls, logs, and practices; identify gaps and uncertainties.
• Develop practical treatments and drive implementation with owners; verify effectiveness.
• Create reusable security patterns with clear evidence requirements and review triggers.
• Collaborate with Legal, Procurement, and vendors on security addenda and negotiations.
• Define requirements, roadmaps, and success measures for bounded programs.

Skills

Vendor security

Security program management

Cross-functional leadership

Risk assessment

Data flows & access

Security frameworks (ISO 27001/NIST 53

Contractual security terms

Codex / AI tooling

Tools

Codex

Job description

OpenAI is seeking a Vendor Security Technical Program Manager to lead security engagements with external vendors and partners. You will scope engagements, assess data flows and access, and drive risk-based treatments with the responsible owners.

You will build reusable security patterns, collaborate with Legal, Procurement, and vendors, and leverage Codex or similar AI-assisted tools to enhance scoping, evidence checks, and track treatments. This role is remote for US-based candidates.