Program Manager, Industrial Security Job at OpenAI (Washington, DC)

Site Security Manager, Industrial Security

Scale is at the forefront of powering artificial intelligence. We believe that t...

Location

United States , Washington

Salary:

148000.00 - 222000.00 USD / Year

Scale

Expiration Date

Until further notice

Requirements

Active U.S. Top Secret clearance, and willingness to obtain a TS/SCI
Minimum 3+ years of experience managing or operating a SCIF or similar classified facility
Familiarity with USG information systems, such as DISS, NBIS, NISS, SWFT, e-App
ICD-705 Certification
Must be able to support work 3 days a week from the office
Working knowledge of ICD 705, NISPOM (32 CFR Part 117), and related Intelligence Community directives
Familiarity with Intrusion Detection Systems, access control systems, and TEMPEST requirements
Experience with government security databases (e.g., DISS, NISS, Scattered Castles)

Job Responsibility

Oversee the construction, modification, and expansion of SCIFs in accordance with ICD 705 and TEMPEST requirements
Work closely with engineering, architecture, and general contracting teams to ensure all physical security requirements are implemented effectively and efficiently
Ensure the SCIF meets or exceeds all requirements under ICD 705, ICD 705-1 (Physical and Technical Security Standards), and ICD 705-2 (Technical Specifications)
Experience managing the SCIF accreditation lifecycle: initial accreditation, interim accreditation, re-accreditation, and de-accreditation
Implement and enforce Standard Operating Procedures (SOPs) for SCIF operations
Familiarity with the Cognizant Security Authority (CSA) and Accrediting Official (AO) relationship, including how to prepare documentation packages, coordinate inspections, and manage waivers
Support all aspects of personnel security management in working directly with government partners to ensure compliance
Responsible for mandatory USG reporting as it relates to our personnel, facility, and insider threat programs
Maintain COMSEC material accountability
Proficiency in implementing and maintaining access controls, visitor management systems, and security documentation in accordance with national security protocols

What we offer

Base salary
Equity
Comprehensive health, dental and vision coverage
Retirement benefits
Learning and development stipend
Generous PTO
Commuter stipend

Fulltime

Industrial Security Lead – Installation Security and Program Protection

Location

United States , Huntsville

Salary:

Not provided

Astrion

Expiration Date

Until further notice

Requirements

10+ years of experience supporting DoD, USSF, USAF, or related federal organizations in industrial security, program protection, acquisition security, or mission assurance roles
BA or BS degree
Equivalent experience may be substituted for education requirements
Active DoD TS/SCI clearance with current investigation
Experience supporting classified programs and secure facility operations in accordance with DoD and IC security requirements
Knowledge of Program Protection Planning (PPP), Critical Program Information (CPI), base level security, and acquisition security processes
Experience supporting base-level or installation security operations, including personnel security, physical security, and classified material control
Familiarity with DoDI 5200.39, DoDI 5200.44, DoDM 5200.01 Volumes 1–4, NISPOM, and related security directives
Experience coordinating with government program offices, contractors, security managers, and engineering teams
Strong organizational, analytical, and communication skills with attention to detail

Job Responsibility

Support industrial security, program protection, and mission assurance activities for critical defense and space acquisition programs
Develop, review, and maintain Security Classification Guides (SCGs) in accordance with DoD policies and directives
Evaluate acquisition documentation with program security and Critical Program Information (CPI) protection requirements
Coordinate with government and contractor stakeholders to identify and mitigate risks to mission systems, technologies, and sensitive information
Support base-level security operations including personnel security, classified visit coordination, secure facility compliance, and physical security requirements
Conduct security assessments, contractor site visits, and compliance reviews to evaluate implementation of security controls and protection measures
Support System Security Working Groups (SSWG), program reviews, and acquisition security meetings through coordination, documentation, and action tracking
Analyze evolving threats, policy updates, and security directives to determine impacts to acquisition and mission systems
Develop written assessments, executive briefings, and security recommendations for program leadership and government customers
Maintain security documentation repositories, tracking matrices, and reporting tools supporting enterprise mission assurance and program protection efforts

What we offer

Competitive salaries
Continuing education assistance
Professional development
Multiple healthcare benefits package options
401K with employer matching
Competitive time off policy along with a federally recognized holiday schedule

Fulltime

Vendor Security Program Manager

As a Program Manager within the Vendor Security team, you will play a crucial ro...

Location

United States , San Francisco; Seattle; New York City; Washington, DC

Salary:

165600.00 - 335000.00 USD / Year

OpenAI

Expiration Date

Until further notice

Requirements

Proven experience conducting third-party or supply chain security assessments, including building and scaling a vendor management security program
An in-depth understanding of information security principles and controls, including data protection, access management, proactive and reactive security measures, and application security
Comfort operating in ambiguity, with the ability to form defensible security opinions even when information is incomplete, timelines are compressed, or business pressure is high
Strong technical and analytical skills, with a demonstrated ability to identify and assess risks from external incidents and industry breaches
Familiarity with workflow optimization tools such as Zip and OneTrust
A passion for integrating new AI technologies into your solutions
Exceptional verbal and written communication skills with the capability to clearly articulate complex security concepts to diverse audiences
A proactive mindset and desire to own and drive security initiatives within a fast-paced environment
Knowledge of key security frameworks and standards such as ISO-27001, NIST 800-53, SOC 2, and understanding of key regulatory requirements such as the Trade Agreement Act (TAA)

Job Responsibility

Be the interface for Security to the rest of the organization for vendors
Own vendor security risk decisions and escalation paths, including clearly documenting risk acceptance, mitigation plans, and executive-level trade-offs when security requirements cannot be fully met
Conduct deep, evidence-based security assessments of third parties, including review of architectures, configurations, controls, logs, and operational practices - moving beyond questionnaires and attestations to validate real-world security posture of vendors
Assess and manage security risk across a diverse vendor landscape, including SaaS providers, cloud and infrastructure partners, hardware manufacturers, chip suppliers, and other strategic or high-impact suppliers
Develop, build, and continuously improve the vendor security program and security supply chain risk management function at OpenAI
Develop, propose, and implement effective controls to mitigate identified vendor risks
Build and maintain collaborative partnerships with key internal stakeholders including Infrastructure Security, Product, Engineering, Legal, Procurement, and Threat Intelligence to ensure comprehensive security coverage of the vendor and third-party supply chain
Streamline and automate vendor and supply chain security processes to increase efficiency and reduce manual overhead

What we offer

Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend to fuel your professional growth
Daily meals in our offices, and meal delivery credits as eligible

Fulltime

Senior Security Program Manager

We’re hiring a senior Sr Security Program Manager to contribute to and mature an...

Location

United States , Buffalo

Salary:

155000.00 - 195000.00 USD / Year

ACV Auctions

Expiration Date

Until further notice

Requirements

8+ years experience building and operating security programs in SaaS / marketplace / fintech / large data platforms
Demonstrable ownership across AppSec, SecOps, and Corporate Security domains
Experience optimizing and helping vulnerability management and incident response programs mature with measurable SLAs (MTTR, remediation windows)
Track record of influencing engineering/product leadership and delivering security as a business enabler (not a blocker)
Strong program management skills: roadmap creation, cross-functional timelines, budget stewardship, vendor selection and contract negotiation
Excellent written + verbal communication
experience preparing executive risk briefings and board-level security summaries
Bachelor’s degree in CS, Engineering, Information Security, or commensurate experience (5+ years) working in a similar role

Job Responsibility

Work with stakeholders to create a unified security program roadmap covering Product Security, SecOps, and Enterprise Security
Translate risk appetite into prioritized initiatives, funding opportunities, and measurable outcomes
Define and publish security KPIs/OKRs as dashboards to various internal audiences
Use data to support visibility and continuous improvement
Work with security teammates to collectively drive programs partnering with Product, Engineering, and DevOps to embed AppSec into the SSDLC
Partner with Operational leads to drive maturity through the creation of requirement frameworks including documented procedures, incident response playbooks, and runbooks
Collaborate with Legal, Privacy, and GRC teams to ensure enterprise controls align with SOC 2 and other industry standard framework requirements
Partner directly with the CISO to ensure top initiatives are well-planned, resourced, and delivered
Identify gaps, improve processes, and support the development of scalable frameworks
Drive cybersecurity initiatives from planning through delivery

What we offer

Multiple medical plans including a high deductible, low cost health plan
Company-sponsored (paid) Short-Term Disability, Long-Term Disability, and Life Insurance
Comprehensive optional benefits such as Dental, Vision, Supplemental Life/AD&D, Legal/ID Protection, and Accident and Critical Illness Insurance
Generous paid time off options, including uncapped vacation days, the greater of 3 paid sick days or in accordance with the applicable state or local paid sick leave law, 6 paid company holidays, 2 floating holidays, parental leave, bereavement leave, jury duty leave, voting leave, and other forms of paid leave as required by applicable law or regulation
Employee Stock Purchase Program with additional opportunities to earn stock in the Company
Retirement planning through the Company’s 401(k)

Fulltime

Security Modernization Program Manager

The Security Modernization Program Manager (SMPM) will be responsible for busine...

Location

United States , Merrimack

Salary:

153377.00 - 260743.00 USD / Year

Baesystems

Expiration Date

Until further notice

Requirements

Active Secret Clearance
Bachelor's degree and 12 or more years of relevant experience related to the position
Working level experience in security infrastructure projects
Ability to work across multiple functions / organizations and build trusted working relationships
Leadership in building high performing cross functional teams with Program Management fundamentals, including planning, monitoring, control, reporting, and organization wide communications and influence
Business acumen and working level experience in support of business operations
Extensive knowledge of industry standard service delivery, operations, processes, standards, tools, and capabilities with a focus on infrastructure and project management
Track record of identifying, developing and implementing IT and Security systems, people, and process improvements to improve business performance
Experience interpreting and enforcing government and company security policies and providing direction and guidance to personnel
Demonstrated record of managing internal and external (supplier) stakeholders

Job Responsibility

Organizes engagement with ES / INC stakeholders to capture business needs and requirements
Leads development of a shared vision and program execution strategy
Oversee the request for proposal (RFP) /Request for Information (RFI), procurement, and installation of an integrated security technology that meets the scope and complexities of Electronic Systems
Leads multi-year integrated business planning (IBP) to secure Capital and Expense resources
Leads & supports project organizational planning, staffing initiatives, and staff development
Builds, develops, and leads a cohesive and high performing team to meet program objectives
Leads program planning, execution, control, and reporting for infrastructure and capabilities
Leads project risk and opportunity management planning and execution to meet program objectives
Collaborates with ES Facilities, Safety Health and Environment (SHE), Program, and IT & Security leaders to secure functional support
Collaborates with ES BAs and Program Teams to deliver on program requirements

What we offer

health, dental, and vision insurance
health savings accounts
a 401(k) savings plan
disability coverage
life and accident insurance
employee assistance program
legal plan
discounts on things like home, auto, and pet insurance
paid time off
paid holidays

Fulltime

Customer Trust & Security Compliance Program Manager

We're looking for a Customer Trust & Security Compliance Program Manager to own ...

Location

United States

Salary:

135000.00 - 150000.00 USD / Year

Vanilla Technologies

Expiration Date

Until further notice

Requirements

Minimum of 5 years in a technical and/or security role with customer facing experience
Minimum of 3 years experience in program management, customer trust, or DDQ/RFP management within the tech industry with highly regulated customers
Proven track record in driving security processes and operational plans
Requires strong attention to detail, organizational skills, good judgement, and the ability to prioritize tasks, manage timelines, and meet tight deadlines
Strong contract review and negotiation skills related to security and compliance
Knowledge of security risks, vulnerabilities, and threat management
Background in supporting customer audits and engagements

Job Responsibility

Lead customer due diligence questionnaire (DDQ) and RFP response process and third-party risk management process
track and manage high volume of DDQ and RFP requests
Coordinate and collaborate with internal teams to meet tight deadlines
Handle a high volume of requests and interactions in a fast-paced environment
Support enterprise sales with technical customer security discussions
Lead SOC 2 Type II audit preparation, evidence collection, and remediation
Conduct third party vendor security assessments, collaborate on third party risk management processes
Implement and manage third party tool and new processes to create efficiencies
Develop the security narrative and conduct security reviews for new product functionality to enable GTM
Review and negotiate security and compliance language in customer contracts in collaboration with Legal team

What we offer

Flexible paid time off policy and 10 company-wide paid holidays
Parental leave, 4 weeks for all full-time employees and up to 12 weeks for birthing parents
Medical, dental, and vision benefits coverage for employees and their families
401K eligibility after one month of employment
Free estate planning documents
Budget for learning & development and home office setup
Paid parking or transit for hybrid and in office employees

Fulltime

Senior Security Risk & Compliance Program Manager

We’re not just building better tech. We’re rewriting how data moves and what the...

Location

Salary:

163400.00 - 192000.00 USD / Year

Confluent

Expiration Date

Until further notice

Requirements

5+ years of relevant industry experience
Strong foundational knowledge in security domains with expertise in at least one
Experience in running long-term security programs that deliver iterative improvements and risk reduction over time
Experience in operational security work, such as incident response and vulnerability management
Experience driving complex and large programs across organizations
Strong communication, interpersonal, and leadership skills to work with both engineering and non-technical stakeholders
Experience managing end-to-end lifecycle of technical projects
Bachelor's degree in Computer Science, a related field, or equivalent practical experience

Job Responsibility

Mentor other Security Program Managers on execution and delivery
Work with stakeholders to drive critical security initiatives for the company
Manage and scale security programs by defining milestones and success criteria, resource allocation, and successful on-time delivery
Proactively identify and resolve roadblocks/challenges affecting projects
Drive automation and process improvements for security programs
Explain technical architecture, decisions, and tradeoffs to both engineering and other functions
Work with Engineering, Product, and Security leadership to streamline and drive our projects on a predictable schedule
Participate in operational security work, including incident response and vulnerability management

What we offer

Remote-First Work
Robust Insurance Benefits
Flexible Time Away
The Best Teammates
Experience Ambassadors
Open and Honest Culture
Well-Being and Growth
Offers Equity

Program Manager, Program Governance

This role will be responsible for program management within the Governance pilla...

Location

United States , Menlo Park

Salary:

122000.00 - 180000.00 USD / Year

Select Country

Program Manager, Industrial Security

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?