Vendor Security Technical Program Manager

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet needs a clear, defensible answer to "how risky is this?" for the risks that live inside our own environment and the risks that come in through every vendor and partner we rely on. We're looking for a Sr. Security Engineer I to own our Security Risk Management program end-to-end—running risk identification, analysis, and quantification; maintaining the enterprise risk register; and driving mitigation strategies that leadership can act on—while also overseeing our Third-Party Risk Management (TPRM) function. You don't need to be a hands-on security engineer to succeed here: you need to understand our technology and architecture well enough to have a real conversation with engineering teams about their risk exposure, and you need the judgment and communication skill to turn technical risk into business language that drives decisions. This role sits at the center of how Smartsheet decides what to fix first, what to accept, and what a vendor relationship is actually costing us in risk. This role reports to the Senior Director, GRC Engineering and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Own and mature Smartsheet's Security Risk Management program: risk identification, analysis, scoring, and quantification (e.g., FAIR-based or similar) across internal systems, third parties, and emerging initiatives. Maintain the enterprise risk register—ratings, ownership, mitigation status, and residual risk—and drive it toward a living, decisi

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and detail-oriented GRC (Governance, Risk, and Compliance) Manager to build, support, and continuously enhance Baseten’s security governance, compliance, and privacy programs. As one of the early members of our security organization, you will play a key role in ensuring our platform meets and exceeds the highest standards for privacy, trust, and regulatory compliance. You’ll work closely with Engineering, Product, Security, and Legal to define compliance requirements, assess platform capabilities, and drive implementation from initial scoping through validation. You will also lead customer assurance efforts, helping customers understand our security architecture and compliance posture while bringing their requirements back into product planning. Alongside this product focus, you’ll contribute to Baseten’s broader GRC program, including governance, risk management, audits, vendor assessments, and security awareness. RESPONSIBILITIES Product Compliance: Translate regulatory, framework, and customer requirements into clear product requirements and technical controls, partnering with Engineering and Product to build compliance into platform design and development. Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices. Risk Management: Build and manag

About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customersuccess with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a Senior Technical Program Manager. Role Overview: We are seeking a Sr. Technical Program Manager to join a growing Security team, with focus on program delivery, driving portfolio management and operating model practices for Backblaze. Key Responsibilities: Lead end-to-end planning and execution of enterprise security programs (e.g., vulnerability management, incident response readiness, identity and access management, data protection, cloud security) from initiation through delivery Communicate technical security concepts and program status clearly to both technical teams and non-technical stakeholders Develop and maintain detailed program plans, timelines, budgets, and resource allocation across multiple concurrent security initiatives Identify, track, and mitigate program risks and dependencies, escalating blockers to leadership with clear options and recommendations Drive cross-functional coordination between engineering, product, legal, and third-party vendors to ensure secu

About Backblaze Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. Backblaze is seeking a Senior Technical Program Manager. Role Overview: We are seeking a Senior Technical Program Manager to join a growing Security team, with a focus on program delivery, driving portfolio management and operating model practices for Backblaze. Key Responsibilities: Lead end-to-end planning and execution of enterprise programs from initiation through delivery Communicate technical concepts and program status clearly to both technical teams and non-technical stakeholders Develop and maintain detailed program plans, timelines, budgets, and resource allocation across multiple concurrent initiatives Identify, track, and mitigate program risks and dependencies, escalating blockers to leadership with clear options and recommendations Drive cross-functional coordination between engineering, product, legal, and third-party vendors to ensure security controls are implemented on schedule Establish and report on program goals, dashboards, and status updates for executive and board-level a

About the Team Critical Harm Operations sits within User Safety & Risk Operations and builds enforcement systems for Frontier Risk and Material Harm that are accurate, fast, defensible, and built to scale. We turn policy intent into operational readiness, review standards, quality systems, escalation paths, automation guardrails, and durable cross-functional operating models. About the Role We are looking for an exceptional Program Manager to help build durable operating systems and run some of OpenAI’s most complex safety operations. The core need is a high-agency operator who can take an ambiguous problem, create the right structure, align cross-functional partners, and drive the work through execution. This role will move across Critical Harm priorities as needs evolve. You may step into operationalizing national security or violent-activities workflows, support wellbeing and Frontier Risk initiatives, or help scale programs such as Trusted Access. Deep domain expertise is helpful but not required; the strongest candidates will learn quickly, exercise excellent judgment, and make complex programs move. In this role, you will: Lead strategic operational builds across priority workflows from problem statement to implemented operating model, including scope, owners, milestones, risks, success measures, and execution cadence. Translate policy, safety, technical, legal, and operational constraints into workflows, requirements, playbooks, escalation paths, and decision-making structures that teams can execute. Coordinate with User Ops leadership, Product Policy, Integrity, Safety Systems, i2, Legal, Product, Engineering, Support, vendors, and other partners to resolve dependencies and keep critical work moving. Move in and out of workflows as priorities shift—standing up new programs, stabilizing operations, improving handoffs, and transitioning durable ownership to the right team. Use operational data and frontline signals to identify bottlenecks, quality gaps, ca

About the Team OpenAI's Research Data Team exists to accelerate the evaluation, safety and capabilities of our models and products. Made up of technical operators and software engineers, we design the methods in which we acquire and create data. About the Role As a Research Program Manager (RPM), Data Acquisition, you will partner with research, engineering, and operations to design and implement pragmatic solutions for acquiring data. You will be a key interface between our research roadmap and external data offerings. This role is based in our San Francisco HQ and will be part of a team of RPMs pushing the frontier of data acquisition. In this role, you will: Partner deeply with research: Work with researchers to scope data needs, define success criteria, and translate priorities into clear execution plans. Shape the data acquisition pipeline: Identify, evaluate, and advance high impact data opportunities - balancing research value, feasibility, quality, and responsible execution. Unblock yourself: Move work forward even when the path is unclear — using technical judgement, creative problem solving, and scrappy execution to make progress while longer-term solutions are still forming. Build lightweight systems and visibility: Use SQL, Python, dashboards, and simple tooling to track performance, quality, and blockers. Drive technical roadmaps: Collaborate with engineers to enhance data platforms, resolve blockers, and ensure security best practices such as access management. Scale your impact: Equip vendors and internal teams with the context, standards, and operating rhythms needed to focus on the most important problems. You’ll thrive in this role if you: Are proficient in SQL and Python for analysing datasets, querying databases, building dashboards, and generating actionable insights. Are comfortable using APIs, automation, and AI tools such as Codex to accelerate workflows, remove manual overhead, and upskill quickly in unfamiliar technical areas.Experience sou