Security Program Manager

Salary: $228K Location Type: Remote Employment Type: Full-Time

About the Team

The Security team's mission is to secure OpenAI systems and products. Our team enables OpenAI to move quickly by reducing risks across our operations and product deployments. We collaborate across research, engineering, product, legal, and operations to build security safeguards that are practical, scalable, and empower innovation.

About the Role

We’re looking for a Security Program Manager to be responsible for securing OpenAI’s most critical product launches. This role is responsible for a cross-functional program focused on ensuring that high-risk, high-visibility product efforts meet our security bar before going out the door.

You’ll coordinate and lead security reviews for complex launches, partner with Security Engineers and cross-functional stakeholders to evaluate risk, and own the end-to-end process that ensures nothing gets shipped without the right security protections in place. Your work will directly impact the safety and trustworthiness of OpenAI’s products in the real world.

Key Responsibilities

• Own security readiness for high-priority launches, coordinating reviews and driving resolution of risks and blockers.
• Orchestrate cross-functional security reviews with stakeholders from AppSec, InfraSec, GRC, and Offensive Security.
• Oversee the resolution of bugs, risks, and exceptions, and maintain clear documentation throughout the launch process.
• Own and evolve our launch-readiness process, which includes defining criteria, codifying playbooks, and reducing ambiguity.
• Communicate security posture to executive stakeholders with clarity and context.
• Partner with product and engineering leads to make security an unblocker—not a bottleneck.

Qualifications

You might thrive in this role if you:

• Have a strong background in security program management, product security, or security operations in fast-paced technical environments.
• Are comfortable acting as the glue across multiple security functions and able to speak fluently across technical teams.
• Thrive in ambiguous situations and bring structure and calm to fast-moving teams.
• Have experience running product launch reviews, security sprints, or incident-like response processes with accountability and rigor.
• Know how to balance risk and velocity, and are skilled at making (and communicating) tradeoffs under pressure.
• Are a proactive communicator who builds trust quickly, earns follow-through, and drives toward secure outcomes.
• Are excited to work on launch-critical systems that shape how OpenAI products are secured and deployed.

About OpenAI

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware, software, and networks from unauthorized access, use, disclosure, disruption, modification, or destruction.