Vendor Security Programs Lead

OpenAI; Seattle (WA); On-site; USD 170,000 - 210,000; Full time

Job summary

OpenAI is seeking a Vendor Security Technical Program Manager to independently lead vendor-security engagements, scope, assess data flows, and drive practical treatments with owners across Security, Legal, and Procurement. You will translate security findings into actionable requirements and work with stakeholders to ensure secure vendor integration.

In this role, you will build bounded tools and reusable risk-management patterns, leverage AI-assisted development tools like Codex, and

Qualifications

• Experience leading vendor-security engagements and risk assessments.
• Ability to translate security findings into practical actions.
• Strong collaboration with Legal, Procurement, and vendor teams.
• Experience using AI-assisted tools to improve security workflows.
• Excellent communication of complex security concepts.

Responsibilities

• Lead vendor-security engagements from scoping to reassessment and risk acceptance.
• Understand vendor use cases, data flows, identities, and integration points.
• Assess architectures, controls, logs, and operational practices; identify gaps.
• Develop practical treatments and drive implementation with owners; verify outcomes.
• Create reusable security patterns with clear evidence requirements and triggers.

Skills

Vendor security

Risk assessment

Security architecture

Stakeholder management

Policy negotiation

Tools

Codex

Job description

OpenAI is seeking a Vendor Security Technical Program Manager to independently lead vendor-security engagements, scope, assess data flows, and drive practical treatments with owners across Security, Legal, and Procurement. You will translate security findings into actionable requirements and work with stakeholders to ensure secure vendor integration.

In this role, you will build bounded tools and reusable risk-management patterns, leverage AI-assisted development tools like Codex, and