Security and Compliance Manager

Job summary

Responsibilities

You will act as a strategic partner to Platform, Product, Agent Development, Legal, and GTM, ensuring security and compliance requirements are embedded into architecture decisions, product roadmaps, and go to market execution while supporting product velocity and technical complexity.

• Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks.
• Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting.
• Develop a strong working understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture.
• Build a centralized and evolving security controls library mapped to compliance, regulatory and customer requirements.
• Define and enforce security baselines for cloud infrastructure, containerized workloads, Kubernetes, identity, encryption, logging, and network security controls.

What they're looking for

• 8+ years of experience in security compliance or GRC or security adjacent roles within fast growing technology companies.
• Deep expertise in security compliance frameworks including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and similar regulatory environments.
• A systems oriented and engineering focused GRC mindset, with the ability to reason about cloud architecture, data flows, and control effectiveness alongside engineers.
• Experience owning complex audits and driving risk based remediation across distributed teams.
• Hands-on experience with multi-cloud infrastructure (AWS, Azure, GCP).

Tech stack

• Kubernetes
• AWS
• Azure
• GCP