Latest AI JobsBrowse Jobs
Sierra logo

Security and Compliance Manager

SierraSan Francisco, CASecurity Programs & GRC
Apply on company site
Salary
$170K - $250K USD
Job type
Full-time
Posted
12 Feb 2026
Status
Open · checked 7d ago

About this role

The Security and Compliance Manager position at Sierra in San Francisco offers an opportunity to lead critical regulatory and security programs for a leading AI platform. This full-time role suits an experienced GRC professional with a strong technical background in cloud infrastructure and security frameworks.

Role Overview

As a Security and Compliance Manager, the professional will head independent audits and regulatory programs including FedRAMP, ISO 42001, PCI DSS, NIST 800-53, and HIPAA. This position involves setting security baselines, designing automated compliance workflows using AI and infrastructure as code, and partnering closely with platform and agent engineering teams. The work ensures that compliance requirements scale seamlessly with platform evolution across multi-cloud environments.

Key Responsibilities

Own independent audits and regulatory programs such as ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and HIPAA.
Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting.
Partner with engineering teams to design and operationalize controls across multi-cloud environments, infrastructure, inference, and data platforms.
Build a centralized security controls library mapped to compliance, regulatory, and customer requirements.
Define and enforce security baselines for cloud infrastructure, containerized workloads, Kubernetes, identity, encryption, logging, and network security controls.
Design and operate automated compliance workflows using AI and infrastructure as code to reduce manual effort.

Requirements

Minimum of 8 years of experience in security compliance, GRC, or security-adjacent roles within fast-growing technology companies.
Deep expertise in frameworks such as ISO 42001, PCI DSS, NIST 800-53, and FedRAMP.
Demonstrated ability to reason about cloud architecture, data flows, and control effectiveness alongside engineers.
Experience owning complex audits and driving risk-based remediation across distributed teams.
Hands-on background with multi-cloud infrastructure including AWS, Azure, and GCP.
Strong capability in implementing and automating security controls across Kubernetes, container security, encryption, and identity systems.
Possession of relevant certifications such as CISSP, CISA, PCI ISA, ISO 27001 Lead Auditor, or equivalent experience.

Nice to Have

Experience supporting AI platforms, fintech, healthcare, or other highly regulated environments.
Familiarity with global regulatory frameworks including GDPR, DORA, the EU AI Act, and APAC regional security requirements.
Experience supporting public sector or FedRAMP-aligned environments.

Skills and Tools

AWS, Azure, GCP, and Kubernetes
Security compliance frameworks (ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA)
Identity, encryption, logging, and network security controls
Infrastructure as code and automated compliance tools

Salary and Benefits

The annual salary range for this position is $170,000 to $250,000 USD. Full-time employees receive flexible unlimited paid time off, medical, dental, and vision coverage for themselves and their families, life insurance, disability benefits, retirement plans, parental leave, and fertility and family building benefits through Carrot. Additional perks include daily lunch, snacks, coffee, a discretionary benefit stipend, free alphorn lessons, and eligibility to participate in company equity plans.

About the Company

Sierra is the premier platform for customer-facing AI agents, collaborating with global brands like The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank. The company is primarily in-person and based in San Francisco, with expanding offices across North America, Europe, and Asia. Founded by tech leaders Bret Taylor and Clay Bavor, Sierra operates on core values of Trust, Customer Obsession, Craftsmanship, Intensity, and Family.

How to Apply

Candidates interested in joining the team should visit the official Sierra careers page to submit an application.

Skills and tech stack

Questions candidates ask

What is the salary range for the Security and Compliance Manager position?

The annual salary for this role ranges from $170,000 to $250,000 USD.

Where is the job located?

The position is based in San Francisco, CA, as Sierra operates primarily as an in-person company.

What level of experience is required?

Candidates must have 8 or more years of experience in security compliance, GRC, or security-adjacent roles within fast-growing technology companies.

What frameworks will this manager handle?

The manager will own programs and audits for frameworks such as ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and HIPAA.

What benefits are offered to full-time employees?

Benefits include flexible unlimited PTO, medical, dental, and vision coverage, life and disability insurance, retirement plans, parental leave, Carrot fertility benefits, daily lunch and snacks, a discretionary benefit stipend, alphorn lessons, and equity plan eligibility.

Ready to apply?

The application is on the official Sierra careers page.

Apply on company site