Security GRC Manager

About us

At Sierra, we’re building a platform to enable every company in the world to build better, more human customer experiences with AI. We partner with industry leaders such as SoftBank, Uber, Rivian, CLEAR, and Sutter Health. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia.

We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do.

Our co-founders are Bret Taylor and Clay Bavor. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. 

The Role

We're looking for a seasoned Customer Trust Enablement professional to join the Security Foundations and GRC team. This is a role for someone with 10+ years experience and has done this work in depth before: you'll turn Sierra's underlying security and compliance posture into assets that accelerate revenue, run the trust-building relationships with our customers' security teams, and stand up the automation that lets us scale enterprise growth.

A defining part of this role is winning the trust of our most regulated customers: banks, financial institutions, healthcare providers, insurers, and others operating under frameworks like HIPAA, HITRUST, GLBA, and state insurance and privacy regimes. As Sierra expands globally, that scope is increasingly international: you'll navigate cross-border data protection and AI regimes (GDPR, UK GDPR, the EU AI Act, and regional data-residency requirements) and work with customers and regulators across North America, EMEA, and APAC. To do this well, you'll develop a genuine understanding of what each industry and region is actually accountable for and why, and bring empathy to the obligations your customers carry into every conversation. You'll lead customer security meetings and audits, go toe-to-toe with their risk and security teams on the hard technical questions, and use automation and AI to handle that depth at scale rather than one painstaking review at a time.

That same understanding flows inward: you'll weigh the tradeoffs between customer expectations, deal velocity, what Sierra can credibly commit to, and translate the patterns you see across regulated buyers into the internal roadmaps that Product, Engineering, and Security build with. This is a high-leverage, cross-functional role for someone who can set strategy and roll up their sleeves.

What You'll Do

Program Strategy & Execution (Roadmap Ownership)

• Own the Customer Trust roadmap end-to-end, evolving priorities based on company growth, customer needs, and the competitive landscape.

• Drive automation platform strategy: evaluate, implement, and scale AI questionnaire and trust platforms to dramatically improve response times and automation rates.

• Build systematic customer intelligence loops that translate the regulatory drivers and recurring concerns across industries and regions such as healthcare, insurance providers, financial services, and global markets into prioritized inputs for the Product, Engineering, and Security GRC roadmaps.

• Define metrics, SLAs, and escalation frameworks for the function, and report on cycle time, coverage, and deal impact to leadership.

• Establish team operating rhythms, metrics reporting, and escalation frameworks.

• Create GTM enablement programs that drive self-service adoption across teams

Customer & Revenue Enablement

• Develop trust artifacts including security landing pages, whitepapers, industry-specific FAQs, data-flow and architecture overviews, and sales enablement materials.

• Lead responses to enterprise security questionnaires and RFP security sections (SIG, CAIQ, custom frameworks), and serve as the named security point of contact in strategic sales cycles.

• Lead live customer security meetings and customer audits with highly regulated customers: banks, financial institutions, and healthcare organizations navigating deep technical and regulatory diligence.

• Support complex security contract reviews requiring security expertise, and escalate appropriately.

AI, Automation & Scale

• Identify broken or manual processes, design scalable solutions, and implement the right tools to maximize efficiency without sacrificing quality.

• Apply automation and AI including AI questionnaire and trust platforms to absorb the volume and depth of regulated-customer diligence, turning days of manual review into minutes.

• Build and maintain a security knowledge base and questionnaire-automation workflows so common questions are answered once and reused across the sales org.

• Curate and update Sierra's Trust Center so customers can self-serve answers under NDA.

Who You'll Work With

This role sits in the Security function. You'll work day-to-day with:

• Sales, GTM and Agent Development integrating Customer Trust workflows into the CRM, streamlining due-diligence processes, and keeping security from becoming a bottleneck in the deal cycle.

• Security developing trust artifacts, security content, and scalable response frameworks grounded in Sierra's actual security posture.

• Legal collaborating on DPAs, BAAs, security exhibits, and the security and data-protection terms in customer agreements.

• Product feeding customer security and compliance signals into roadmap prioritization.

• Executive audiences and customer/prospects representing Sierra's security posture in strategic customer engagements and Field CISO activities, leading audits and security meetings with the risk teams at regulated banks and financial institutions, and translating technical security concepts for business stakeholders.

What You'll Bring

You may be a good fit if you:

• Have 10+ years of progressive experience in compliance, security, or customer trust, with 5+ years building or scaling customer-facing security programs from early stage through high growth and seniority and judgment.

• Have a proven track record managing enterprise security relationships at scale: you've personally led customer audits and security meetings, built trust with Fortune 500 CISOs, and know how to balance rigor with deal velocity.

• Have hands-on experience selling into or supporting highly regulated buyers financial services, banks, healthcare, or insurance and can navigate the depth of their security and regulatory diligence with credibility.

• Understand the regulatory landscape across customer industries and geographies well enough to know what each is genuinely accountable for, and bring empathy to those obligations, balancing customer needs, deal velocity, and what Sierra can credibly commit to, and turning that judgment into clear internal priorities.

• Have experience supporting global customers and navigating international data protection and AI regimes (e.g., GDPR, UK GDPR, EU AI Act, cross-border transfer and data-residency requirements).

• Have strong technical acumen you can explain complex security architectures, compliance frameworks (NIST 800-53, SOC 2, ISO 27001, PCI DSS, HIPAA), and multi-cloud implementations (AWS, GCP) in customer-friendly language.

• Have experience implementing trust automation platforms or building scaled questionnaire-management processes.

• Can identify broken processes, design scalable solutions, and implement the right tools to maximize efficiency without sacrificing quality.

• Are comfortable presenting to C-level executives and translating technical security concepts for business audiences.

• Have a proven track record of cross-functional influence without direct authority — you build partnerships that get things done.

• Have experience integrating security into go-to-market motions.

Strong candidates may also:

• Have worked in AI/ML or high-growth SaaS companies navigating rapid compliance expansion.

• Bring Customer Trust and Security experience supporting enterprise deals.

• Have familiarity with emerging AI standards (ISO 42001, NIST AI RMF).

• Possess relevant certifications (CISA, CRISC, CISM, CISSP, ISO 27001 Lead Auditor).

• Have experience with AI safety or AI agent / model security considerations.

Our values

• Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work.

• Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it.

• Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve.

• Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time.

• Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements.

What we offer

We want our benefits to reflect our values and offer the following to full-time employees:

• Flexible (unlimited) paid time off

• Medical, dental, and vision benefits for you and your family

• Life insurance and disability benefits

• Retirement plan dependent on country of employment

• Parental leave

• Fertility and family building benefits through Carrot

• Lunch, as well as delicious snacks and coffee to keep you energized 

• Discretionary benefit stipend giving people the ability to spend where it matters most

• Free alphorn lessons

These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies.

Be you, with us

We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply even if your experience doesn't precisely match the job description. We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.