Sierra

1 month ago

Vendor Security Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Vendor Security Manager to build and scale Sierra's vendor security program, conducting deep technical assessments, developing AI vendor risk frameworks, and driving security decisions across all third-party relationships. This hands-on role requires technical depth, risk-based judgment, and the ability to balance speed, scale, and security in regulated environments.

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Security & Public Safety

Seniority: Sr. Manager level

Key Responsibilities

•Be the interface between Security and Sierra teams on vendor security, drive risk conversations, and keep the program moving.
•Own vendor security risk decisions and escalation paths end-to-end, including documentation of risk acceptance rationale, mitigation plans, and trade-offs.
•Build and continuously improve the vendor security program methodology, tooling, risk tiering, monitoring, and response as Sierra's vendor footprint grows.
•Assess and manage security risk across Sierra's full third-party landscape, tailoring oversight to different vendor types (APIs, SaaS, contractors).
•Ensure the program meets audit and regulatory expectations (SOC 2, PCI DSS, FedRAMP, ISO 27001, and emerging AI governance).

Pay and Benefits

Perks:Paid LeaveMedical BenefitsRetirementParantal LeaveEquity PlansLife Insurance

Key Requirements

•10+ years in information security with depth in vendor security, third-party risk, or GRC in regulated environments (financial services, healthcare, government, or enterprise SaaS). You have made consequential risk decisions under pressure and are accountable for them.
•Technical fluency in cloud security, AWS and GCP IAM, VPC architecture, encryption, logging and monitoring, and shared responsibility models so you can assess a vendor's architecture and impact on Sierra's exposure.
•Deep working knowledge of ISO 27001, NIST 800-53, SOC 2, PCI DSS, and FedRAMP as they apply to third-party oversight; you understand auditors' needs and build rigorous programs.
•Experience building automations, integrations, or detection logic (GRC tooling, APIs, or scripting) to reduce manual work and surface risk signals at scale.
•Genuine curiosity about AI security model supply chains, prompt data handling, adversarial ML, and governance frameworks around AI systems.

Experience:AIVendor securityGRCEnterprise SaaSSecurity governance

Skills:CommunicationLeadershipProblem-solving

Certifications:CISSPCISA

Tech Stack:AWSGCPIAMVPCEncryptionLoggingMonitoringISO 27001NIST 800-53SOC 2PCI DSSFedRAMPSBOMAI securityAPIsAutomation

Company Brief

Sierra

Develops advanced AI agents and tools focused on building autonomous, generalist machine learning systems to assist developers and enterprises in automating complex workflows, decision-making, and application-level tasks.

Industry: AI & Machine Learning

Website

Loading job details...

Preparing the role view and application actions.

Sierra

1 month ago

Vendor Security Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Security & Public Safety

Seniority: Sr. Manager level

Key Responsibilities

•Be the interface between Security and Sierra teams on vendor security, drive risk conversations, and keep the program moving.
•Own vendor security risk decisions and escalation paths end-to-end, including documentation of risk acceptance rationale, mitigation plans, and trade-offs.
•Build and continuously improve the vendor security program methodology, tooling, risk tiering, monitoring, and response as Sierra's vendor footprint grows.
•Assess and manage security risk across Sierra's full third-party landscape, tailoring oversight to different vendor types (APIs, SaaS, contractors).
•Ensure the program meets audit and regulatory expectations (SOC 2, PCI DSS, FedRAMP, ISO 27001, and emerging AI governance).

Pay and Benefits

Perks:Paid LeaveMedical BenefitsRetirementParantal LeaveEquity PlansLife Insurance

Key Requirements

•10+ years in information security with depth in vendor security, third-party risk, or GRC in regulated environments (financial services, healthcare, government, or enterprise SaaS). You have made consequential risk decisions under pressure and are accountable for them.
•Technical fluency in cloud security, AWS and GCP IAM, VPC architecture, encryption, logging and monitoring, and shared responsibility models so you can assess a vendor's architecture and impact on Sierra's exposure.
•Deep working knowledge of ISO 27001, NIST 800-53, SOC 2, PCI DSS, and FedRAMP as they apply to third-party oversight; you understand auditors' needs and build rigorous programs.
•Experience building automations, integrations, or detection logic (GRC tooling, APIs, or scripting) to reduce manual work and surface risk signals at scale.
•Genuine curiosity about AI security model supply chains, prompt data handling, adversarial ML, and governance frameworks around AI systems.

Experience:AIVendor securityGRCEnterprise SaaSSecurity governance

Skills:CommunicationLeadershipProblem-solving

Certifications:CISSPCISA

Tech Stack:AWSGCPIAMVPCEncryptionLoggingMonitoringISO 27001NIST 800-53SOC 2PCI DSSFedRAMPSBOMAI securityAPIsAutomation

Company Brief

Sierra

Industry: AI & Machine Learning

Website