AI Platform Security & Compliance Lead

Sierra; California (MO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible PTO

Medical, dental, and vision benefits

Life insurance and disability

Retirement plan

Parental leave

Fertility and family building benefits

Lunch and snacks

Discretionary benefit stipend

Free alphorn lessons

Job summary

Sierra is seeking a seasoned security compliance leader to own audits and regulatory programs, define readiness and remediation plans, and collaborate with Platform and Engineering to strengthen the company’s security posture across AWS, Azure, and GCP. You will build a centralized controls library, automate workflows, and communicate complex compliance needs across teams.

You will partner with Legal, Product, and GTM to embed security in architecture decisions and roadmaps, while advancing

Qualifications

• 8+ years of experience in security compliance or GRC or security adjacent roles within fast growing technology companies.
• Deep expertise in security compliance frameworks including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, and similar regulatory environments.
• A systems oriented and engineering focused GRC mindset, with the ability to reason about cloud architecture, data flows, and control effectiveness alongside engineers.
• Experience owning complex audits and driving risk based remediation across distributed teams.
• Hands‑on experience with multi‑cloud infrastructure (AWS, Azure, GCP).
• Strong experience implementing and automating security controls across cloud infrastructure, configuration management, container security, Kubernetes, encryption, identity, and authentication systems.
• Ability to clearly communicate compliance requirements internally to engineering teams and externally to customers in a technically credible way.
• Relevant certifications such as CISSP, CISA, PCI ISA, ISO 27001 Lead Auditor, or equivalent experience.

Responsibilities

• Audit and regulatory program ownership across ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks.
• Define scope, readiness assessments, auditor engagement, remediation planning, and executive reporting.
• Develop understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture; partner to design and operationalize controls across multi-cloud environments.
• Build a centralized security controls library mapped to compliance and customer requirements; drive remediation and strengthen Sierra’s posture.
• Define and enforce baselines for cloud infrastructure, containers, Kubernetes, identity, encryption, logging, and network security; integrate requirements into config and change management.
• Design and operate automated compliance workflows using AI, IaC, and security tooling to scale with platform evolution.

Skills

GRC experience

ISO 42001

PCI DSS

NIST 800-53

FedRAMP

Multi-cloud

Cloud security

Audits & remediation

Kubernetes security

Communication skills

CISSP/CISA/Lead Auditor

Education

CISSP

CISA

PCI ISA

ISO 27001 Lead Auditor

Tools

AWS

Azure

GCP

Job description

Sierra is seeking a seasoned security compliance leader to own audits and regulatory programs, define readiness and remediation plans, and collaborate with Platform and Engineering to strengthen the company’s security posture across AWS, Azure, and GCP. You will build a centralized controls library, automate workflows, and communicate complex compliance needs across teams.

You will partner with Legal, Product, and GTM to embed security in architecture decisions and roadmaps, while advancing