Security GRC Manager: Customer Trust Enablement

Sierra; San Francisco (CA); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Flexible (unlimited) paid time off

Medical, dental, and vision benefits

Life insurance and disability benefits

Parental leave

Free alphorn lessons

Job summary

Sierra is looking for a strategic leader in Customer Trust to manage security programs and initiatives. You will own the Customer Trust roadmap, lead security meeting with key customers, and create trust artifacts to support enterprise requirements.

Ideal candidates will have extensive experience in compliance and security operations, demonstrating strong technical acumen and the ability to present to executive audiences. The role offers comprehensive benefits including unlimited PTO and medical coverage.

Qualifications

• 10+ years in compliance or security operations, with 3+ years in customer-facing roles.
• Proven track record in managing enterprise security relationships.
• Experience in navigating regulatory landscapes such as GDPR and HIPAA.

Responsibilities

• Own the Customer Trust roadmap and adapt priorities based on growth.
• Lead responses to enterprise security audits and questionnaires.
• Develop security artifacts and enablement materials.

Skills

Compliance expertise

Security operations

Customer trust management

Cross-functional influence

Technical acumen

Education

Relevant certifications (CISA, CISSP, etc.)

Tools

AI automation platforms

Job description

What You’ll Do

Program Strategy & Execution (Roadmap Ownership)

• Own the Customer Trust roadmap end-to-end, evolving priorities based on company growth, customer needs, and the competitive landscape.
• Drive automation platform strategy: evaluate, implement, and scale AI questionnaire and trust platforms to dramatically improve response times and automation rates.
• Build systematic customer intelligence loops that translate regulatory drivers and recurring concerns across industries and regions into prioritized inputs for the Product, Engineering, and Security GRC roadmaps.
• Define metrics, SLAs, and escalation frameworks for the function, and report on cycle time, coverage, and deal impact to leadership.
• Establish team operating rhythms, metrics reporting, and escalation frameworks.
• Create GTM enablement programs that drive self‑service adoption across sales teams, so AEs and Solutions can confidently field first‑pass security questions.

Customer & Revenue Enablement

• Develop trust artifacts including security landing pages, whitepapers, industry‑specific FAQs, data‑flow and architecture overviews, and sales enablement materials.
• Lead responses to enterprise security questionnaires and RFP security sections (SIG, CAIQ, custom frameworks), and serve as the named security point of contact in strategic sales cycles.
• Lead live customer security meetings and audits with highly regulated customers: banks, financial institutions, and healthcare organizations navigating deep technical and regulatory diligence.
• Support complex security contract reviews requiring security expertise, and elevate appropriate issues.

AI, Automation & Scale

• Identify broken or manual processes, design scalable solutions, and implement the right tools to maximize efficiency without sacrificing quality.
• Apply automation and AI to absorb the volume and depth of regulated‑customer diligence, turning days of manual review into minutes.
• Build and maintain a security knowledge base and questionnaire‑automation workflows so common questions are answered once and reused across the sales org.
• Curate Sierra’s Trust Center so customers can self‑serve answers under NDA.

Who You’ll Work With

This role sits in the Security function and works day‑to‑day with:

• Sales, GTM and Agent Development – integrating Customer Trust workflows into the CRM and streamlining due‑diligence processes.
• Security – developing trust artifacts, security content, and scalable response frameworks grounded in Sierra’s actual security posture.
• Legal – collaborating on DPAs, BAAs, security exhibits, and the security and data‑protection terms in customer agreements.
• Product – feeding customer security and compliance signals into roadmap prioritization.
• Executive audiences and customer/prospects – representing Sierra’s security posture in strategic engagements and Field CISO activities.

What You’ll Bring

You may be a good fit if you:

• Have 10+ years of progressive experience in compliance, security operations, or customer trust, with 3+ years building or scaling customer‑facing security programs.
• Have a proven track record managing enterprise security relationships at scale: you’ve personally led customer audits and security meetings, built trust with Fortune 500 CISOs, and balanced rigor with deal velocity.
• Have hands‑on experience selling into or supporting highly regulated buyers in financial services, banks, healthcare, or insurance.
• Understand regulatory landscapes across industries and geographies well enough to identify each’s accountable responsibilities and translate that judgment into clear internal priorities.
• Have experience supporting global customers and navigating international data‑protection and AI regimes (e.g., GDPR, UK GDPR, EU AI Act).
• Have strong technical acumen and can explain complex security architectures, compliance frameworks (NIST 800‑53, SOC 2, ISO 27001, PCI SS, HIPAA), and multi‑cloud implementations (AWS, GCP) in customer‑friendly language.
• Have experience implementing trust automation platforms or building scaled questionnaire‑management processes.
• Can identify broken processes, design scalable solutions, and implement the right tools to maximize efficiency without sacrificing quality.
• Are comfortable presenting to C‑level executives and translating technical security concepts for business audiences.
• Have a proven track record of cross‑functional influence without direct authority – building partnerships that get things done.
• Have experience partnering with Revenue Operations, Deal Desk, or Sales teams to integrate security into go‑to‑market motions.

Strong candidates may also:

• Have worked in AI/ML or high‑growth SaaS companies navigating rapid compliance expansion.
• Bring Field CISO or Customer Success Security experience supporting enterprise deals.
• Have familiarity with emerging AI standards (ISO 42001, NIST AI RMF).
• Possess relevant certifications (CISA, CRISC, CISM, CISSP, ISO 27001 Lead Auditor).
• Have experience with AI safety or AI agent/model security considerations.

Benefits

• Flexible (unlimited) paid time off
• Medical, dental, and vision benefits for you and your family
• Life insurance and disability benefits
• Retirement plan dependent on country of employment
• Parental leave
• Fertility and family building benefits through Carrot
• Lunch, snacks, and coffee to keep you energized
• Discretionary benefit stipend giving people the ability to spend where it matters most
• Free alphorn lessons

These benefits are further detailed in Sierra’s policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full‑time employees can participate in Sierra’s equity plans subject to the terms of the applicable plans and policies.

We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.