Security Program Manager

About the Team

OpenAI builds powerful AI systems like ChatGPT, the OpenAI API, and enterprise products that serve millions of users across the globe. As we scale, securing our infrastructure, protecting sensitive data, supporting employees’ velocity, and meeting global compliance standards are essential to our success and societal impact.

Security at OpenAI is a cross-cutting organization that includes Security, Privacy, IT, GRC, Corporate Security, and other teams. Program Managers play a critical role in aligning teams and delivering execution at scale.

About the Role

We’re seeking a Program Manager to build and own programs that span OpenAI’s Security organization, with a core focus on Mergers & Acquisitions. You will work across domains from diligence through Day 1 readiness, integration, onboarding, and transition to ongoing ownership. You will also apply what you build to other priorities that span Security teams. You will learn how work actually moves between teams, spot gaps and unclear ownership, and build practical systems that make complex transitions easier to execute.

This role is deeply cross-functional and execution-focused. It requires a structured operator who thrives in ambiguity, partners effectively across boundaries, and applies principled judgment to drive programs at speed from initial planning through durable handoff. You will use AI and automation to reduce repetitive work and help teams operate at greater scale, while applying sound judgment to sensitive information and consequential decisions.

In this role, you will:

- Own Security & IT M&A programs, including supporting System Operations and other engineering teams in defining and performing timely diligence assessments, and scoping, planning, and executing acquisition integrations. Carry the work through Day 1 readiness, onboarding of people and systems, post-close priorities, and handoff to ongoing owners.

- Partner with Corporate Development, IT, Infrastructure, Application, Legal, Privacy, Security, GRC, Corporate Security and other teams to understand cross-functional requirements and navigate tradeoffs. Make responsibilities and decision rights clear while bringing in the right experts for technical and risk judgments.

- Learn partner teams’ workflows and identify missed dependencies, bottlenecks, duplicated effort, and risks that could slow an integration or weaken its outcome. Address recurring problems at their source.

- Establish scalable frameworks and processes to support core programs, including defining durable program goals and core measures of success. Build useful intake paths, playbooks, onboarding checklists, decision points, and handoff standards that teams adopt in practice.

- Use AI and automation to organize information, surface gaps, improve documentation, route work, and track follow-through, with appropriate handling of sensitive information and human review of risk decisions.

- Create and maintain program-level visibility across deals, risks, milestones, and dependencies, ensuring program outcomes are delivered reliably and at high quality. Measure whether the work improves readiness, reduces manual effort, closes risks, and makes future transitions more predictable.

- Communicate status, risks, tradeoffs, and decisions clearly to technical and executive audiences and drive cross-functional execution with urgency and care.

- Own additional programs that span Security and IT as organizational priorities evolve, applying and improving the systems built through the M&A portfolio.

You might thrive in this role if you:

- Are an empathetic communicator and leader who is able to influence a variety of cross-functional and executive audiences, and build durable trust with partners.

- Have 5+ years of experience leading complex cross-functional programs, with a proven record of successful partnership in security, IT, infrastructure, privacy, trust, product risk, or other technical domains.

- Have carried programs from an ambiguous starting point through execution and lasting ownership.

- Have built a new program, workflow, or operating model yourself and can show how you earned adoption and improved results.

- Are curious about how teams work in practice and can find the underlying issue behind a missed handoff or recurring exception.

- Have used AI or automation to improve a real workflow and can explain what changed, how people adopted it, and where human judgment remains necessary.

- Have experience in Mergers & Acquisitions or related areas.

- Thrive in high-trust environments, bring rigor and systems thinking to ambiguity, and operate with a bias for aligned execution over org boundaries.

- Are structured, detail-oriented, and rigorous in ensuring quality, accountability, and durable delivery.