OpenAI

InfoSec Lead

OpenAI • $150K — $180K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • 5-7 years of experience in information security, with a focus on leadership roles in tech or enterprise software.
  • Proven track record of building or scaling security functions in fast-growing organizations.
  • Strong technical knowledge in cloud security, identity management, application security, and incident response.
  • Experience securing AI applications and understanding their unique threat landscapes.
  • Ability to translate complex security concepts into actionable strategies for technical and executive audiences.
  • Demonstrated success in incident response and decision-making under pressure.
  • Excellent communication skills for engaging with executives and boards.

Responsibilities

  • Build and own DeployCo's security strategy, roadmap, and operating model.
  • Establish core security capabilities across various domains including cloud infrastructure and data protection.
  • Partner with Engineering and Delivery to integrate security into the customer deployment lifecycle.
  • Define security requirements for AI applications and manage associated risks.
  • Leverage AI and automation to enhance security operations and incident response.
  • Lead security assurance efforts and prepare for relevant certifications like SOC 2 and ISO 27001.
  • Collaborate with Legal and commercial teams on security reviews and data protection requirements.
  • Manage incident preparedness and response, ensuring clear communication during incidents.
  • Support acquisitions and integrations to maintain a consistent security baseline.
  • Provide executive leadership with insights into risks and program maturity.

Benefits

  • Opportunity to shape and lead a critical security function in a growing company.
  • Hands-on leadership role with direct impact on security strategy and execution.
  • Collaboration with cross-functional teams including IT, Engineering, and Legal.
  • Focus on innovative security solutions, particularly in AI applications.
  • Potential for professional growth in a fast-paced, evolving environment.
Full Job Description
About the Role

We are seeking an InfoSec Lead to build and lead DeployCo's security function as we scale globally. You will own our security strategy and execution, protecting our people, systems and data while helping teams deliver secure AI solutions for enterprise customers.

This is a hands-on leadership role. You will establish the foundations of our security programme, build a high-performing team and partner closely with IT, Engineering, Delivery and Legal. You will be a trusted advisor to leadership and a credible counterpart to customer security teams, translating complex risks into clear decisions.

AI will be central to your remit. You will shape how we secure AI applications and agentic systems, govern our internal use of AI, and apply AI to improve our own security capabilities.

Success will mean a security function that earns customer confidence, gives teams practical ways to build securely and keeps pace with the company's growth.

In this role, you will:
  • Build and own DeployCo's security strategy, roadmap, budget and operating model, with clear priorities and accountability across the business.
  • Establish core security capabilities across cloud infrastructure, identity and access, data protection, application security, vulnerability management, detection and incident response.
  • Partner with Engineering and Delivery to embed security into the full lifecycle of customer deployments, from architecture and development through production operations.
  • Define security requirements and practical controls for AI applications, agents and internal AI adoption, covering approved tools, data handling, access permissions, third-party integrations and human oversight, while addressing risks such as prompt injection, sensitive data exposure and tool misuse.
  • Use AI and automation to improve security operations, including alert triage, investigation, vulnerability prioritisation and evidence collection, with appropriate validation and controls.
  • Lead security assurance and audit readiness, building towards relevant frameworks and certifications such as SOC 2 and ISO 27001 as customer and business needs require.
  • Work with Legal and commercial teams on customer security reviews, contractual commitments, supplier risk and data protection requirements.
  • Own incident preparedness and response, including exercises, escalation processes, recovery planning and clear communication during incidents.
  • Support acquisitions, integrations, bringing teams and systems onto a consistent security baseline.
  • Give executive leadership and the board clear visibility into material risks, programme maturity and investment decisions.
  • Hire, develop and lead a strong security team, building a culture where security is understood and shared across the company.

You may thrive in this role if you:
  • Bring significant experience in information security, including senior leadership responsibility in a technology, enterprise software or services business.
  • Have built or materially scaled a security function in a fast-growing organisation and know how to sequence investment as the business evolves.
  • Combine strategic judgement with technical depth across cloud security, identity, application security and detection and response.
  • Have practical experience securing AI-enabled applications or deployments, with a clear understanding of how models, retrieval systems, agents and tool integrations change the threat landscape.
  • Have a considered view on where AI can improve security operations and where human judgement and verification remain essential.
  • Have earned the trust of enterprise customers and can confidently discuss security architecture, assurance and risk with their technical and executive leaders.
  • Have led significant incident response and can make clear, proportionate decisions under pressure.
  • Can turn security requirements into controls and workflows that engineers and delivery teams can use effectively.
  • Communicate clearly with executives and boards, connecting technical risks to customer trust, business priorities and investment choices.
  • Enjoy building in ambiguity, taking ownership and staying close enough to the work to help solve difficult problems directly.

About OpenAI

OpenAI is an artificial intelligence research laboratory consisting of the for-profit corporation OpenAI LP and its parent company, the non-profit OpenAI Inc. The company was founded in 2015 by a group of technology leaders, including Elon Musk, Sam Altman, Greg Brockman, Ilya Sutskever, and John Schulman. OpenAI's mission is to develop and promote friendly AI for the betterment of humanity. The company has developed a number of cutting-edge AI technologies, including GPT-3, a language processing system that can generate human-like text. OpenAI has received funding from a number of high-profile investors, including LinkedIn co-founder Reid Hoffman and venture capitalist Peter Thiel.
Learn more about OpenAI
Size
100 employees
Industry
Founded
2015

Similar Jobs

More Jobs at OpenAI

More Information Technology Jobs

Find similar InfoSec Lead jobs: