Lead Lead Security Technical Program Manager Manager Specialist in United States

About the Team The Industrial Security team enables OpenAI’s classified and national security work by building secure, compliant programs that support government customers and protect sensitive information. We partner across Security, Legal, People, Facilities, Engineering, IT, and program leadership to translate complex government requirements into practical operating models that allow important work to move forward responsibly. Our work spans personnel security, classified facilities, special programs, government customer engagement, and the safeguards required to operate in highly regulated environments. About the Role As a Senior Special Programs Security Manager, you will lead security operations for OpenAI’s Sensitive Compartmented Information (SCI) and Special Access Programs (SAP), serving in customer-designated roles such as Contractor Special Security Officer (CSSO) or Contractor Program Security Officer (CPSO). You will help shape how OpenAI operates across the Intelligence Community and other national security environments, building the relationships, processes, and security foundations required to support classified work at scale. We’re looking for someone who brings deep special programs expertise, sound operational judgment, and the credibility to work directly with government customers and senior internal stakeholders. This is a hands-on leadership role for someone comfortable navigating ambiguity, helping build the function, mentoring future team members, and finding compliant paths forward when mission needs and security requirements intersect. This role is based in San Francisco, CA, or Washington, DC. We use a hybrid work model of three days in the office per week and offer relocation assistance to new employees. Additional onsite presence and occasional travel may be required based on classified program, facility, and government customer needs. This position requires active Top Secret eligibility, current SCI access, and a current counterintelli

About the Team The Corporate Security team is responsible for safeguarding all OpenAI employees and executives. Our mission is to create a secure, resilient environment that allows our teams to focus on their work without risk or disruption. We manage physical security operations across offices, events, and global initiatives, partnering closely with internal teams and external agencies to stay ahead of emerging threats. About the Role As the Corporate Security Operations Manager based in Mountain View, you will own day-to-day site security operations and help develop practical physical-security strategies, policies, and procedures. You will lead vendor-managed armed and unarmed security teams, partner cross-functionally, and serve as a key liaison with local law enforcement and security partners. This is a hands-on site-operations and guard-force leadership role, not primarily an executive, investigative, or policy-leadership position. The role typically requires 4-5 days in the office each week. In this role, you will: Office Security: Develop, implement, and manage practical physical-security measures, including policies, training, and vendor relationships, to protect employees and visitors across the Mountain View site and nearby facilities. Operational Management: Own the day-to-day performance of vendor-managed armed and unarmed security teams across shifts and locations. Set clear operational expectations and ensure security personnel understand and consistently follow company policies, post orders, and procedures. Monitor security practices, identify operational risks, and drive timely, practical mitigation and remediation. Coordinate with Workplace, Facilities, building management, law enforcement, and other internal and external partners to maintain a cohesive security posture. Support broader Corporate Security operations as needed. Support or lead security operations for on-campus events. Serve as the primary point of contact for VIP and government-guest

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: SoFi's Cyber Defense organization is looking for an Offensive Security Lead to mature and grow our Penetration Testing and Red Team functions. This is a hands-on leadership role for someone who has spent years both doing the work and building the program around it — someone equally comfortable running a red team engagement against a critical banking platform and designing the operating model that lets a small team of offensive operators keep pace with a fast-growing fintech. A defining part of this role is modernizing how the team scales. We're looking for a leader who has already built and implemented AI-assisted penetration testing and red teaming programs — using AI tooling to accelerate reconnaissance, exploit development, attack-path analysis, and reporting — and who can bring that experience to bear on the program. You'll own the strategy, staffing, tooling, and execution quality of both disciplines, report into Cyber Defense leadership, and act as a trusted advisor to engineering, product, and risk partners across the company. What You’ll Do: Lead and unify Penetration Testing and Red Team into a single, cohesive Offensive Security function — shared standards, shared tradecraft, shared reporting, distinct missions. Set and execute the offensive security roadmap, aligning testing scope

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information. Our work centers in three areas: Ramp builds products with an eye for security Ramp detects and responds to threats before they cause harm Security powers Ramp’s growth Check out our Engineering Blog for more on our tech stack, mission and values! What You’ll Do Build security-focused application primitives and integrate them into our existing products Design and deploy platform-level mitigations to common security issues Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program Partner with engineering teams to design and deploy solutions which are inherently secure Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure system

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . We're hiring a Manager, GRC to join our Technology Risk & Controls team within Security and lead second line of defense advisory coverage across critical technology and security domains. This team evaluates risk posture, improves control design, and helps engineering, infrastructure, and security leaders make better, risk-informed decisions. You'll both manage a team and directly own advisory coverage for domains that may include disaster recovery and resiliency, SDLC, artificial intelligence, identity and access management, and supply chain - building trusted partnerships that ensure Coinbase addresses its most critical risks in its most critical functions. What you'll do: Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business. Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed. Review and challenge the design of new and existing risks and their corresponding controls to ensure our mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations. Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations i

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role Join our growing security team and help drive security detection and response initiatives across Ramp. This will include a focus on maturing our security detection and alerting capabilities across our federal and public sector environments. Please note that this role will require you to be comfortable with working in-person at our NYC HQ (located near Madison Square Park) at least 2 days/week What You’ll Do Respond and assist with security requests and incidents submitted by Ramp team members Review logging, alerting, and audit sources to identify potential security incidents and perform initial triage on identified incidents Contribute to the creation, upkeep, and tuning of runbooks and security alerts to effectively handle, triage, and improve security alerts Work closely with the Ramp Security Engineers to improve security alerting and automated remediation Utilize log ingestion platform for security analytics and identification of tactics, techniques and patterns of attackers Design and implement automation to detect and respond t

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! Why this role? We're building the foundational infrastructure that will define how the world thinks about and deploys AI, and we want the sharpest, most curious people to help us do it. As a Lead Data Scientist on our Analytics and Data Insights team, you'll tackle problems that don't have textbook answers yet; shaping go-to-market strategy for technology that's still being invented, designing the experiments that prove or kill our biggest bets, and helping enterprises understand what foundational AI actually means for their bottom line. You'll own the full analytical lifecycle, from framing the right questions and building the models, to leading a team that delivers answers leadership can act on. As a Lead Data Scientist, you will: Drive the mission forward. Own the science: design and lead experimentation programs including A/B tests, multi-armed bandits, causal inference studies, that directly map to product and go-to-market decisions. Build predictive models that matter: develop and deploy models for forecasting, segmentation, propensity scoring, and opportunity sizing across Cohere's core business lines. Lead and grow a tea

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As Vanta's Lead People Business Partner for Post-Sales, you'll be the senior-most dedicated people partner to our SVP of Post-Sales and their leadership team across Account Management, Customer Success, and Support - acting as a trusted advisor and coach as we scale a world-class post-sales organization. This role is primarily focused on partnering with our Director+ leaders, though you may work with leaders at other levels as needs arise. Vanta's Post-Sales organization - spanning Account Management, Customer Success, and Support - is responsible for ensuring our customers realize ongoing value from Vanta, driving retention, expansion, and an excellent customer experience as we grow. In this role, you'll combine deep People Business Partner expertise with strong business acumen to help Post-Sales leaders build healthy, high-performing teams. You'll partner directly with leaders on org design, talent strategy, and change management, while also being hands-on with complex performance and employee relations matters - ensuring the function has the structure and support it needs to scale. What you’ll do as a Lead People Business Partner, Post Sales at Vanta: Serve as a trusted thought partner, consultant, and coach to the SVP of Post-Sales and their leaders across Account Management, Customer Success, and Support Serve as the primary point of contact for Director+ leaders across the global Post-Sales organization Lead headcount planning for the Post-Sales org in partnership with Finance, RevOps, and Recruiting - from business justification through execution Provide guidance and thought leadership on performance management, change m

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. About GitLab GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. Gi

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As SEC Manager on GitLab’s Accounting team, you’ll take end-to-end ownership of our external financial reporting, including Forms 10-K and 10-Q. This isn’t a collect-and-consolidate role. You’ll drive the reporting calendar, coordinate work across Accounting, Legal, Financial Planning and Analysis (FP&A), and Investor Relations, and improve the quality, clarity, and consistency of our disclosures and reporting processes. You’ll report to the Director of SEC Reporting and work remotely from the Americas. What you’ll do Own the preparation, review, and filing of GitLab’s Securities and Exchange Commissi

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. THE ROLE We're looking for a Procurement Lead to build Baseten's procurement function from the ground up. This is a foundational, high-ownership role for someone who wants to define how a company runs procurement, not inherit an existing process. As the company scales across engineering, GTM, and corporate functions, we need to build purchasing workflows and vendor relationships. This is a rare, critical-moment hire: you'll set the leading-practice processes, systems, and policies that the company runs on as it continues to grow, with the mandate and dedicated focus to build something built to scale. This role exists to make procurement a source of leverage for the business, not friction. Your goal is to build scalable process, take on vendor management and RFP work that today sits informally with individual teams, and free up business owners' time and capacity, all while building the guardrails the company needs as it grows. You'll partner closely with Finance, Legal, Security, Compliance, IT, and business owners across the company, and you'll be judged on whether teams feel supported and unblocked, not slowed down. RESPONSIBILITIES Procurement Strategy and Process Design and implement Baseten's first company-wide procurement process, approval routing, and other workflows Establish procurement policies (spend thresholds, approval authority, competitive bidding requirements) tailored to a high-growth business Design pr

We're looking for someone to join the Datadog Procurement team and help expand the Strategic Sourcing group. Make an impact by being a trusted subject matter expert in several buying categories and continuing to prove the value that Strategic Sourcing brings to the organization. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You'll Do: Lead strategic sourcing for enterprise SaaS and IT categories - owning net-new purchases and complex, high-spend renewals through a documented, collaborative evaluation process, with action plans built well ahead of renewal dates. Own software license and subscription strategy, right-sizing entitlements, minimizing shelfware, and replacing last-minute buying with forward-looking renewal and demand planning. Lead the IT hardware procurement team responsible for purchasing, sourcing, and replenishment (laptops, peripherals, networking, office AV), balancing demand with headcount and multi-region growth while leveraging OEM/distributor relationships and buying scale. Lead the transformation of IT Procurement (hardware and SaaS licenses) from transactional to strategic - standardizing processes, introducing supplier-management discipline, and establishing operational metrics and KPIs. Develop strong, trusted relationships with stakeholders and collaborate on strategizing the purchase plan, negotiating pricing and other business terms with vendors on net-new purchases and complex, high-spend renewals, partnering cross-functionally with Procurement Operations, Legal, Security, IT, and Office Operations to ensure compliant, scalable execution. Create pricing models based on vendor proposals to quantify various buying scenarios related to our future growth and current demand Manage and develop a direct report, with

About the Role We’re looking for a Procurement Enablement Lead to improve how employees and stakeholders navigate procurement at OpenAI. This role partners across Procurement, Finance, Legal, Security, Privacy, and Enterprise Technology to simplify workflows, improve guidance, and support scalable procurement experiences across the procurement lifecycle. You’ll translate procurement policies and operational requirements into clearer processes, better-enabled systems, and more intuitive employee experiences that reduce friction while strengthening consistency and controls as OpenAI continues to grow. This role is ideal for someone who combines operational judgment, process design, and strong cross-functional partnership skills. You should be comfortable working in evolving environments where systems and workflows are still being built and continuously improved. A key part of the role will be identifying opportunities to use AI and automation to streamline workflows, reduce manual work, and improve service delivery across Procurement operations. This role is based in San Francisco, CA. We use a hybrid work model of 3 days per week in the office and offer relocation assistance to new employees. In this role, you will: Partner across Procurement, Finance, Legal, Security, Privacy, and Enterprise Technology to improve how procurement work gets requested, routed, approved, and supported across the spend lifecycle. Help design and improve procurement intake, guidance, and workflow experiences that make it easier for employees and stakeholders to navigate procurement processes. Translate procurement policies, operational needs, stakeholder feedback, and operational insights into clear business requirements for workflows, automation, reporting, analytics, and process improvements. Partner with Enterprise Technology and tool owners to support workflow configuration improvements across procurement systems, including approvals, routing, SLAs, escalation paths, exception handlin

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from. Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for: Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go. Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them. A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level. Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience. A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here and follow us on LinkedIn for company news, employee stories, and career updates. Job Summary: We are looking for a Senior Business Development Lead, Cloud Service Providers to join the Drata team. This is a senior individual contributor role responsible for leading and expanding Drata's strategic partnerships across major cloud providers, including AWS. As the primary owner of our CSP partner strategy, you will shape how Drata co-sells, co-markets, and integrates within the