OpenAI · 1 day ago
Vendor Security Program Manager
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. As a Program Manager within the Vendor Security team, you will play a crucial role in protecting the organization against external risks posed by suppliers and vendors, conducting security assessments, and driving security initiatives across third-party relationships.
Agentic AIArtificial Intelligence (AI)Foundational AIGenerative AIMachine LearningNatural Language ProcessingSaaS
Responsibilities
Be the interface for Security to the rest of the organization for vendors
Own vendor security risk decisions and escalation paths, including clearly documenting risk acceptance, mitigation plans, and executive-level trade-offs when security requirements cannot be fully met
Conduct deep, evidence-based security assessments of third parties, including review of architectures, configurations, controls, logs, and operational practices - moving beyond questionnaires and attestations to validate real-world security posture of vendors
Assess and manage security risk across a diverse vendor landscape, including SaaS providers, cloud and infrastructure partners, hardware manufacturers, chip suppliers, and other strategic or high-impact suppliers
Develop, build, and continuously improve the vendor security program and security supply chain risk management function at OpenAI
Develop, propose, and implement effective controls to mitigate identified vendor risks
Build and maintain collaborative partnerships with key internal stakeholders including Infrastructure Security, Product, Engineering, Legal, Procurement, and Threat Intelligence to ensure comprehensive security coverage of the vendor and third-party supply chain
Streamline and automate vendor and supply chain security processes to increase efficiency and reduce manual overhead
Qualification
Required
Proven experience conducting third-party or supply chain security assessments, including building and scaling a vendor management security program
An in-depth understanding of information security principles and controls, including data protection, access management, proactive and reactive security measures, and application security
Comfort operating in ambiguity, with the ability to form defensible security opinions even when information is incomplete, timelines are compressed, or business pressure is high
Strong technical and analytical skills, with a demonstrated ability to identify and assess risks from external incidents and industry breaches
Exceptional verbal and written communication skills with the capability to clearly articulate complex security concepts to diverse audiences
A proactive mindset and desire to own and drive security initiatives within a fast-paced environment
Knowledge of key security frameworks and standards such as ISO-27001, NIST 800-53, SOC 2, and understanding of key regulatory requirements such as the Trade Agreement Act (TAA)
Preferred
Familiarity with workflow optimization tools such as Zip and OneTrust
A passion for integrating new AI technologies into your solutions
Benefits
Relocation assistance to new employees
Company
OpenAI
OpenAI is an AI research and deployment company that develops advanced AI models, including ChatGPT. It is a sub-organization of OpenAI Foundation.
H1B Sponsorship
OpenAI has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (1)
2024 (1)
2023 (1)
2022 (18)
2021 (10)
2020 (6)
Funding
Current Stage
Growth StageTotal Funding
$79BKey Investors
The Walt Disney CompanySoftBankThrive Capital
2025-12-11Corporate Round· $1B
2025-10-02Secondary Market· $6.6B
2025-03-31Series Unknown· $40B
Recent News
2026-01-25
MIT Technology Review
2026-01-25
MIT Technology Review
2026-01-25
Company data provided by crunchbase