Security and Compliance Manager
San Francisco, CA$170k - $250kFull-timePosted 8mo ago
About the role
Security and Compliance Manager responsible for leading independent audits and regulatory programs, developing and operating security controls across multi-cloud environments, and partnering with engineering to embed security and compliance into Sierra’s AI platform.
Responsibilities
- Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks.
- Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting.
- Develop a strong working understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture. Partner with Platform and Agent Engineering to design and operationalize controls across multi cloud environments, infrastructure, inference and data platforms.
- Build a centralized and evolving security controls library mapped to compliance, regulatory and customer requirements. Continuously assess control effectiveness, identify gaps, prioritize risk, and drive remediation that strengthens Sierra’s security and compliance posture.
- Define and enforce security baselines for cloud infrastructure, containerized workloads, Kubernetes, identity, encryption, logging, and network security controls. Partner with engineering teams to integrate security requirements into configuration and change management.
- Design and operate automated compliance workflows using AI, infrastructure as code, and security tooling to reduce manual effort, improve control assurance, and scale with platform evolution.
Qualifications
- 8+ years of experience in security compliance or GRC or security adjacent roles within fast growing technology companies.
- Deep expertise in security compliance frameworks including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and similar regulatory environments.
- A systems oriented and engineering focused GRC mindset, with the ability to reason about cloud architecture, data flows, and control effectiveness alongside engineers.
- Experience owning complex audits and driving risk based remediation across distributed teams.
- Hands-on experience with multi-cloud infrastructure (AWS, Azure, GCP).
- Strong experience implementing and automating security controls across cloud infrastructure, configuration management, container security, Kubernetes, encryption, identity, and authentication systems.
- Ability to clearly communicate compliance requirements internally to engineering teams and externally to customers in a technically credible way.
- Relevant certifications such as CISSP, CISA, PCI ISA, ISO 27001 Lead Auditor, or equivalent experience.
Skills
Required:Independent audits and regulatory programsRegulatory frameworks (ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA)Multi-cloud infrastructureSecurity controls automationCommunication of compliance requirements
Benefits
- Flexible (unlimited) paid time off
- Medical, dental, and vision benefits for you and your family
- Life insurance and disability benefits
- Retirement plan dependent on country of employment
- Parental leave
- Fertility and family building benefits through Carrot
- Lunch, snacks and coffee
- Discretionary benefit stipend
- Free alphorn lessons
Last updated Sep 16, 2026. Interested? Apply on the company site.
About Sierra
Better customer experiences. Built on Sierra.
Sierra helps businesses build better, more human customer experiences with AI.
AICustomer ExperienceCustomer SupportVoiceai-agents-and-applicationsorchestrationvoice-ai-stackwing-list-2026
More open roles at Sierra
- Product Counsel4d agoSan Francisco, CA · Legal
- Integrated Marketing Lead4d agoSan Francisco, CA · Marketing & Communications
- Software Engineer Intern, Agent (London 2027)4d agoLondon · Early Career
- Sales Engineering Manager, High Growth1w agoSan Francisco, CA · Sales
- Strategist, Agent Development (MBA Grad 2027)1w agoSan Francisco, CA, New York, NY · Product