Security and Compliance Manager

Sierra
San Francisco
Workplace: OnsiteFull timeUSD 170,000 - 250,000 annuallyFunction: Legal, Risk & ComplianceExperience: 8+ yearsSkills: ["Communication","Leadership","Stakeholder management","Problem-solving"]

Lead independent audits and regulatory programs across ISO, PCI, NIST, FedRAMP, and HIPAA, while shaping Sierra’s security controls. Collaborate with Platform/Agent Engineering to implement multi-cloud controls, build a centralized compliance library, and define baselines for cloud infrastructure, containers, and identity. Drive readiness, remediation, and executive reporting to strengthen Sierra’s security and compliance posture in a fast-growing AI-focused environment.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Sierra
Sierra
6 months ago

Security and Compliance Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 22 minutes agoStatus: Live

Job Summary

Lead independent audits and regulatory programs across ISO, PCI, NIST, FedRAMP, and HIPAA, while shaping Sierra’s security controls. Collaborate with Platform/Agent Engineering to implement multi-cloud controls, build a centralized compliance library, and define baselines for cloud infrastructure, containers, and identity. Drive readiness, remediation, and executive reporting to strengthen Sierra’s security and compliance posture in a fast-growing AI-focused environment.
Location: San Francisco
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Manager level

Key Responsibilities

  • •Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks.
  • •Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting.
  • •Develop a strong working understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture. Partner with Platform and Agent Engineering to design and operationalize controls across multi cloud environments, infrastructure, inference and data platforms.
  • •Build a centralized and evolving security controls library mapped to compliance, regulatory and customer requirements. Continuously assess control effectiveness, identify gaps, prioritize risk, and drive remediation that strengthens Sierra’s security and compliance posture.
  • •Define and enforce security baselines for cloud infrastructure, containerized workloads, Kubernetes, identity, encryption, logging, and network security controls. Partner with engineering teams to integrate security requirements into configuration and change management.
  • •Design and operate automated compliance workflows using AI, infrastructure as code, and security tooling to reduce manual effort, improve control assurance, and scale with platform evolution.

Pay and Benefits

Salary: USD 170,000 - 250,000 annually
Equity and Bonus:Equity
Perks:Paid LeaveMedical BenefitsDentalVisionLife InsuranceRetirementParential LeaveFertility BenefitsMeal AllowanceSnacksStipendAlphorn Lessons

Key Requirements

  • •8+ years of experience in security compliance or GRC or security adjacent roles within fast growing technology companies.
  • •Deep expertise in security compliance frameworks including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and similar regulatory environments.
  • •Hands-on experience with multi-cloud infrastructure (AWS, Azure, GCP).
  • •Experience owning complex audits and driving risk based remediation across distributed teams.
  • •Ability to clearly communicate compliance requirements internally to engineering teams and externally to customers in a technically credible way.
Experience:8+ yearsTechnologyAISecurityGRCCloud
Skills:CommunicationLeadershipStakeholder managementProblem-solving
Certifications:CISSPCISAPCI ISAISO 27001 Lead Auditor
Tech Stack:AWSAzureGCPKubernetesDockerInfrastructure as codeSecurity tooling

Company Brief

Sierra
Develops advanced AI agents and tools focused on building autonomous, generalist machine learning systems to assist developers and enterprises in automating complex workflows, decision-making, and application-level tasks.
Industry: AI & Machine Learning
Website