Senior Technical Program Manager – Security Lead

About the Team

OpenAI builds powerful AI systems like ChatGPT, the OpenAI API, and enterprise products that serve millions of users across the globe. As we scale, securing our infrastructure, protecting sensitive data, and meeting global compliance standards are essential to our success and societal impact.

Security at OpenAI is a cross-cutting function that spans infrastructure, applied engineering, legal, policy, and product. Technical Program Managers (TPMs) play a critical leadership role in aligning teams and delivering execution at scale—and this leadership role will be foundational in shaping how we secure OpenAI’s systems, users, and commitments.

About the Role

We are hiring a Security TPM Lead to drive the strategy, leadership, and execution of OpenAI’s most critical security and compliance programs. This is a senior leadership TPM role responsible for overseeing complex technical initiatives (e.g., access control, audit logging, workload identity, enterprise-grade security features), while also leading and growing a team of TPMs who operate across security, compliance, and privacy domains.

You will partner with Engineering, Infrastructure, Security, GRC, Legal, and Product leadership to align priorities, drive accountability, and build the program management structures needed to scale our security posture with precision and urgency.

This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees.

In this role, you will:

• Lead and mentor a team of TPMs across security-focused initiatives, by setting direction, operating models, and performance expectations.

• Oversee the end-to-end program strategy and execution for OpenAI’s foundational security systems, including internal access controls, infrastructure hardening, secure-by-default development pipelines, and audit readiness.

• Partner with engineering teams to deliver critical security outcomes including role-based access control (RBAC), secrets management, audit logging, monitoring, detection and response, and user-facing security and privacy controls.

• Establish scalable frameworks and build programs around critical security initiatives including vulnerability management, evidence collection, incident response coordination, supply chain risk management, and device security.

• Serve as the executive point of contact for aligning program execution with legal, policy, and regulatory requirements.

• Create and maintain program-level visibility across risk areas, security milestones, and cross-org dependencies—ensuring outcomes are delivered reliably and at high quality.

You might thrive in this role if you:

• Are an empathetic communicator and leader—able to influence across technical and non-technical audiences, and build durable trust with partners.

• Have 15+ years of experience in technical program management, including prior leadership of TPMs or technical program teams.

• Have served at the Senior Manager, Director, or equivalent level in a fast-paced, high-scale technology company; preferably with deep security and infrastructure exposure.

• Have successfully led large-scale programs involving sensitive systems (e.g., access governance, secure deployment pipelines, audit logging, user data protections).

• Are deeply fluent in the intersection of engineering systems, security controls, and regulatory expectations—and are able to bring clarity and structure across all three.

• Thrive in high-trust environments, bring rigor and systems thinking to ambiguity, and operate with a bias for aligned execution over org boundaries.