Security and Compliance Manager
Enterprise conversational-AI platform that helps businesses build and operate customer-experience agents across channels.
Maintainer signals as of 9/23/2026
About Sierra
Sierra provides an AI platform for businesses to build, deploy, analyze, and optimize customer-facing agents across chat, SMS, WhatsApp, email, voice, and ChatGPT.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead independent audits and regulatory programs, define audit scope, assess readiness, engage auditors, plan remediation, and report to executives. You will design and automate security controls across cloud infrastructure, data platforms, containerized workloads, Kubernetes, identity, encryption, logging, and network security.
Requirements
- 8+ years of security compliance, GRC, or security-adjacent experience in fast-growing technology companies
- Expertise in ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and similar regulatory environments
- Ability to evaluate cloud architecture, data flows, and control effectiveness with engineers
- Experience owning complex audits and risk-based remediation across distributed teams
- Hands-on multi-cloud infrastructure experience with AWS, Azure, and GCP
- Experience automating security controls across cloud infrastructure, configuration management, container security, Kubernetes, encryption, identity, and authentication
- Ability to communicate compliance requirements to engineering teams and customers
- Relevant certification such as CISSP, CISA, PCI ISA, ISO 27001 Lead Auditor, or equivalent experience
Responsibilities
- Own independent audits and regulatory programs
- Define scope and conduct readiness assessments
- Engage auditors, plan remediation, and provide executive reporting
- Develop understanding of the conversational AI platform, model providers, and cloud architecture
- Design and operationalize controls across multi-cloud environments
- Build and maintain a security controls library
- Assess control effectiveness, prioritize risk, and drive remediation
- Define and enforce cloud and workload security baselines
- Integrate security requirements into configuration and change management
- Design and operate automated compliance workflows
Benefits
- Equity
- Flexible unlimited paid time off
- Medical, dental, and vision benefits for employees and their families
- Life insurance and disability benefits
- Retirement plan dependent on country of employment
- Parental leave
- Fertility and family-building benefits through Carrot
- Lunch, snacks, and coffee
- Discretionary benefit stipend
- Free alphorn lessons