Vendor Security Manager

Responsibilities

• Build and scale Sierra's vendor security program from the ground up
• Conduct deep technical security assessments of SaaS, cloud, and AI model providers
• Develop assessment frameworks specifically for AI vendor risk and model supply chain integrity
• Automate evidence collection and risk detection logic to scale the program
• Manage security risk decisions and escalation paths across the third-party landscape

Requirements

• 10+ years in information security with depth in vendor security or GRC
• Technical fluency in cloud security (AWS/GCP IAM, VPC, encryption)
• Deep knowledge of ISO 27001, NIST 800-53, SOC 2, PCI DSS, and FedRAMP

Preferred Qualifications

• Experience building a vendor security program from scratch
• Familiarity with software supply chain security, SBOM, and dependency integrity
• CISSP or CISA certification

About the Company

Sierra is creating a platform to help businesses build better, more human customer experiences with AI. Founded by Bret Taylor and Clay Bavor, the company is guided by values of Trust, Customer Obsession, Craftsmanship, Intensity, and Family.