Vendor Security Technical Program Manager

🔥 18 hours ago

🦀 Maryland – Remote

🦀 Maryland – Remote

💵 $231.3k - $256.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 Technical Program Manager

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenAI

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2015

🤖 Artificial Intelligence

☁️ SaaS

🏢 Enterprise

Artificial Intelligence • SaaS • Enterprise

OpenAI is a leading research organization and company dedicated to creating advanced artificial intelligence technology, with a strong emphasis on safety and ethical considerations. OpenAI's mission is to ensure that artificial general intelligence (AGI) benefits all of humanity. The company develops AI products like ChatGPT, which can assist users with tasks ranging from everyday requests to complex enterprise solutions. OpenAI also provides an API platform that integrates its AI models into various applications. The company is focused on innovation in AI and improving data analysis capabilities, while emphasizing safety and ethical governance of their systems.

📋 Description

• Own vendor security engagements from business-need understanding through scoping, assessment, decision, treatment, and reassessment • Make assessment decisions independently and route formal exceptions and risk acceptance to appropriate decision owners • Analyze vendor use cases, workflows, user journeys, data flows, identities, access, integrations, and supply-chain dependencies • Identify plausible attack paths and consequences for OpenAI • Assess architectures, configurations, controls, logs, and operational practices • Test evidence supporting security claims and clarify gaps and uncertainty • Develop practical treatments involving operating models, data exposure, access, architecture, vendor choice, controls, or containment • Drive implementation with responsible owners and verify treatment effectiveness • Build reusable security patterns with applicability, safeguards, evidence requirements, exceptions, and review triggers • Work with Legal, Procurement, and vendors on security addenda and contractual positions • Define requirements, roadmaps, and success measures for bounded programs, products, and services • Use Codex or comparable AI-assisted tools to improve scoping, evidence checks, routing, decision reuse, and treatment tracking • Lead delivery across Security and partner teams, translating goals into technical requirements, milestones, and delivery plans • Identify systemic risks, resolve dependencies and disagreements, and carry commitments through completion • Use casework, incidents, threat information, and customer feedback to improve decisions and program priorities

🎯 Requirements

• Independently assessed consequential third-party, supply-chain, or comparable security risks • Understanding of security principles and controls, including data protection, access management, application security, prevention, detection, and response • Ability to reason about architecture, identity, APIs, data flows, logging, integrations, and control effectiveness • Knowledge of ISO 27001, NIST 800-53, and SOC 2 • Experience translating security findings and requirements into practical contractual positions • Experience delivering products or workflow improvements, testing expected behavior and failure cases, learning from users, and owning performance after launch • Ability to use Codex or comparable AI-assisted development tools to build, run, inspect, and test working solutions • Experience independently delivering cross-functional programs and translating ambiguity into technical requirements and plans • Ability to judge when to build, use existing systems, or engage partners to resolve blockers • Ability to communicate complex security issues clearly in writing and conversation, including recommendations, evidence, and tradeoffs • Active Full Scope Polygraph clearance • Willingness to work on-site at a client’s office 5 days a week in Maryland, if applicable

🏖️ Benefits

• Equity • Performance-related bonus(es) for eligible employees • Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts • Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit) • 401(k) retirement plan with employer match • Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents) • Paid medical and caregiver leave (up to 8 weeks) • Flexible PTO for exempt employees and up to 15 days annually for non-exempt employees • 13+ paid company holidays • Multiple paid coordinated company office closures throughout the year • Paid sick or safe time • Mental health and wellness support • Employer-paid basic life and disability coverage • Annual learning and development stipend • Daily meals in offices • Meal delivery credits as eligible • Relocation support for eligible employees • Charitable donation matching • Wellness stipends • Reasonable accommodations for applicants with disabilities • Immigration and sponsorship support may be provided based on individual circumstances