OpenAI
Vendor Security Technical Program Manager
$257K–$285K
US - Remote +2 · Remote · Manager · Full-time · Posted Oct 2, 2026
- Location
- US - Remote
Seattle
San Francisco
About the job
Leads vendor security assessments and cross-functional risk treatments, while building reusable tools and workflows that help teams engage vendors securely.
What you'll do
- Own vendor security engagements, assess risks and evidence, recommend treatments, and verify safeguards with responsible owners.
- Develop reusable security patterns and work with Legal, Procurement, and vendors on security addenda and workable positions.
- Lead delivery of bounded security programs and AI-assisted workflow improvements, from requirements and planning through adoption and ongoing operation.
What they ask for
- Independently assess consequential third-party, supply-chain, or comparable security risks.
- Understand security controls and be able to reason about architecture, identity, APIs, data flows, logging, and integrations.
- Use relevant frameworks and standards, including ISO 27001, NIST 800-53, and SOC 2.
- Use Codex or comparable AI-assisted development tools to build, run, inspect, and test working solutions.
Nice to have
- Experience translating security findings and requirements into practical contractual positions with Legal, Procurement, and vendors.
- Experience delivering useful products or workflow improvements and owning performance after launch.
Pay
$257K – $285K USD base salary
Tools
Codex, ISO 27001, NIST 800-53, SOC 2
AI focus
Use Codex or comparable AI-assisted tools to build, inspect, test, and maintain improvements to vendor-security workflows, such as scoping, evidence checks, routing, decision reuse, and treatment tracking.
Model-written summary · the original posting is authoritative