AI Vendor Security Program Lead

Sierra; California (MO); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Unlimited PTO

Medical, dental, vision benefits

Life insurance

Retirement plan

Parental leave

Equity participation

Job summary

Sierra is seeking a Vendor Security Manager to build and scale our vendor security program. You will conduct deep assessments of vendors, define AI vendor risk frameworks, and drive security decisions across all third‑party relationships to protect our regulated, fast‑moving platform.

You will partner with Platform Engineering, Legal, and Finance to ensure risk governance while enabling rapid growth and strong security posture across the vendor ecosystem.

Qualifications

• 10+ years in information security with depth in vendor security, third‑party risk, or GRC in regulated environments.
• Experience making risk decisions under pressure for enterprise SaaS, financial services, healthcare, or government.

Responsibilities

• Interface between Security and Sierra teams on vendor security topics.
• Own vendor security risk decisions end‑to‑end with mitigation plans.
• Develop and improve vendor security program methodology, tooling, and monitoring at scale.
• Assess risk across Sierra’s third‑party landscape including contractors and strategic partners.
• Ensure audit and regulatory compliance (SOC 2, PCI DSS, FedRAMP, ISO 27001).
• Conduct deep security assessments of vendor/supply chain, including IAM, configurations, and vulnerabilities.
• Develop AI/model vendor frameworks addressing data handling and model supply chain integrity.
• Map and monitor the full supply chain, including fourth parties and open source components.
• Create detection, alerting, and dashboards to surface vendor risk signals to leadership.
• Collaborate with Engineering, Legal, and Finance to align risk with business needs.

Skills

Vendor security

Third-party risk

GRC

Regulated environments

Risk decision making

Cloud security

AWS IAM

GCP IAM

VPC architecture

Encryption

Logging & monitoring

Shared responsibility model

CISSP

CISA

ISO 27001

PCI DSS

FedRAMP

GRC tooling

APIs

Scripting

Automation tooling

Education

CISSP

CISA

ISO 27001

PCI DSS

FedRAMP

Tools

GRC tooling

APIs

Scripting

Automation tooling

Job description

Sierra is seeking a Vendor Security Manager to build and scale our vendor security program. You will conduct deep assessments of vendors, define AI vendor risk frameworks, and drive security decisions across all third‑party relationships to protect our regulated, fast‑moving platform.

You will partner with Platform Engineering, Legal, and Finance to ensure risk governance while enabling rapid growth and strong security posture across the vendor ecosystem.