Security GRC Manager

Responsibilities

• Own the Customer Trust roadmap end-to-end, evolving priorities based on company growth and customer needs
• Drive automation platform strategy by evaluating and scaling AI questionnaire and trust platforms
• Build systematic customer intelligence loops to translate regulatory drivers into product and engineering roadmaps
• Develop trust artifacts including security landing pages, whitepapers, and industry-specific FAQs
• Lead responses to enterprise security questionnaires (SIG, CAIQ) and serve as the security point of contact in sales cycles
• Lead live customer security meetings and audits with highly regulated organizations in finance and healthcare
• Identify manual processes and implement scalable AI/automation solutions to maximize efficiency

Requirements

• 10+ years of progressive experience in compliance, security, or customer trust
• 5+ years building or scaling customer-facing security programs in high-growth environments
• Proven track record managing enterprise security relationships and leading customer audits
• Hands-on experience supporting highly regulated buyers in financial services, banking, or healthcare
• Deep understanding of international data protection and AI regimes (GDPR, UK GDPR, EU AI Act)
• Strong technical acumen in security architectures and compliance frameworks (SOC 2, ISO 27001, HIPAA, NIST)
• Experience with multi-cloud implementations (AWS, GCP)
• Ability to present complex technical security concepts to C-level executives

Preferred Qualifications

• Experience in AI/ML or high-growth SaaS companies
• Familiarity with emerging AI standards like ISO 42001 or NIST AI RMF
• Relevant certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Auditor
• Experience with AI safety or AI agent/model security considerations

About the Company

Sierra is creating a platform to help businesses build better, more human customer experiences with AI. Founded by Bret Taylor and Clay Bavor, Sierra is guided by values of Trust, Customer Obsession, Craftsmanship, Intensity, and Family.