Security and Compliance Manager

About the Company

Sierra is creating a platform to help businesses build better, more human customer experiences with AI. Guided by values of Trust, Customer Obsession, Craftsmanship, Intensity, and Family, the company is led by co-founders Bret Taylor and Clay Bavor.

Responsibilities

• Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and HIPAA
• Drive scope definition, readiness assessments, auditor engagement, and remediation planning
• Partner with Platform and Agent Engineering to design and operationalize controls across multi-cloud environments
• Build and maintain a centralized security controls library mapped to compliance and regulatory requirements
• Define and enforce security baselines for cloud infrastructure, Kubernetes, identity, and network security
• Design and operate automated compliance workflows using AI and infrastructure as code

Requirements

• 8+ years of experience in security compliance, GRC, or security adjacent roles in fast-growing tech companies
• Deep expertise in ISO 42001, PCI DSS, NIST 800-53, and FedRAMP
• Systems-oriented and engineering-focused mindset with ability to reason about cloud architecture
• Hands-on experience with multi-cloud infrastructure (AWS, Azure, GCP)
• Experience implementing security controls across container security, Kubernetes, and encryption systems
• Relevant certifications such as CISSP, CISA, PCI ISA, or ISO 27001 Lead Auditor

Preferred Qualifications

• Experience supporting AI platforms, fintech, or healthcare environments
• Familiarity with global regulatory environments like GDPR, DORA, and the EU AI Act
• Experience supporting public sector or FedRAMP aligned environments