Security GRC Manager: Customer Trust Enablement

About us At Sierra, we’re building a platform to enable every company in the world to build better, more human customer experiences with AI. We partner with industry leaders such as SoftBank, Uber, Rivian, CLEAR, and Sutter Health. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. The Role We're looking for a seasoned Customer Trust Enablement professional to join the Security Foundations and GRC team. This is a role for someone with 10+ years experience and has done this work in depth before: you'll turn Sierra's underlying security and compliance posture into assets that accelerate revenue, run the trust-building relationships with our customers' security teams, and stand up the automation that lets us scale enterprise growth. A defining part of this role is winning the trust of our most regulated customers: banks, financial institutions, healthcare providers, insurers, and others operating under frameworks like HIPAA, HITRUST, GLBA, and state insurance and privacy regimes. As Sierra expands globally, that scope is increasingly international: you'll navigate cross-border data protection and AI regimes (GDPR, UK GDPR, the EU AI Act, and regional data-residency requirements) and work with customers and regulators across North America, EMEA, and APAC. To do this well, you'll develop a genuine understanding of what each industry and region is actually accountable for and why, and bring empathy to the obligations your customers carry into every conversation. You'll lead customer security meetings and audits, go toe-to-toe with their risk and security teams on the hard technical questions,