Vendor Security TPM: Build Secure Vendor Programs

OpenAI; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

OpenAI is seeking a Vendor Security Technical Program Manager to lead security engagements with external products and partners, turning recurring problems into tools and practiced workflows. You will own engagements end-to-end, assess data flows and access, and drive practical treatments with owners, while building reusable patterns and collaborating with Legal, Procurement, and vendors.

This role emphasizes independent judgment, clear communication, and delivering measurable improvements that

Qualifications

• Experience translating security findings into practical actions.
• Ability to assess third‑party risk and advise on controls.
• Experience delivering security improvements across teams.

Responsibilities

• Own vendor security engagements from scope to reassessment.
• Assess vendor use cases, data flows, access, and supply-chain dependencies.
• Evaluate architectures, controls, logs, and operational practices.
• Develop practical treatments and drive implementation with owners.
• Build reusable security patterns and evidence requirements.
• Collaborate with Legal, Procurement, and vendors on security addenda.
• Lead cross-functional delivery and define requirements and roadmaps.
• Use AI-assisted tools to improve scoping, evidence checks, and routing.
• Explain risks and tradeoffs clearly to stakeholders.
• Drive adoption and handoff for completed initiatives.

Skills

Vendor security

Risk assessment

Stakeholder management

Security architectures

Tools

Codex

Job description

OpenAI is seeking a Vendor Security Technical Program Manager to lead security engagements with external products and partners, turning recurring problems into tools and practiced workflows. You will own engagements end-to-end, assess data flows and access, and drive practical treatments with owners, while building reusable patterns and collaborating with Legal, Procurement, and vendors.

This role emphasizes independent judgment, clear communication, and delivering measurable improvements that