Security and Compliance Manager

About the role

Lead Sierra’s security and compliance program by owning audits, defining controls, and partnering with engineering to embed regulatory requirements into the Conversational AI platform.

Key responsibilities

• Own independent audits and regulatory programs such as ISO 42001, PCI DSS, NIST 800‑53, FedRAMP and HIPAA.
• Drive scope definition, readiness assessments, auditor engagement, remediation planning and executive‑level reporting.
• Partner with Platform and Agent Engineering to design and operationalize security controls across multi‑cloud, containerized and Kubernetes environments.
• Build and maintain a centralized security controls library mapped to compliance and customer requirements.
• Define and enforce security baselines for cloud infrastructure, identity, encryption, logging and network security.
• Design and operate automated compliance workflows using AI, infrastructure‑as‑code and security tooling.

Required profile

• 8+ years of experience in security compliance, GRC or related roles within fast‑growing technology companies.
• Deep expertise in security compliance frameworks (ISO 42001, PCI DSS, NIST 800‑53, FedRAMP, HIPAA).
• Systems‑oriented, engineering‑focused mindset with ability to reason about cloud architecture and data flows.
• Hands‑on experience owning complex audits and driving risk‑based remediation across distributed teams.
• Relevant certifications such as CISSP, CISA, PCI ISA or ISO 27001 Lead Auditor.

Required skills

• AWS, Azure, GCP multi‑cloud environments.
• Kubernetes and container security.
• Infrastructure‑as‑code and security automation tools.
• Encryption, identity and authentication systems.
• Strong ability to communicate compliance requirements to engineering and customers.

What we offer

• Unlimited paid time off and flexible work policies.
• Medical, dental and vision benefits for employees and families.
• Life insurance, disability coverage and retirement plans.
• Parental leave, fertility and family‑building benefits.
• Equity participation for eligible full‑time employees.