Security GRC Manager: Customer Trust Enablement

About us

* At Sierra, we're creating a platform to help businesses build better, more human customer experiences with AI. We are primarily an in-person company based in San Francisco, with growing offices in Atlanta, New York, London, Paris, Madrid, Munich, Singapore, Japan, and Sydney.

* We are guided by a set of values that are at the core of our actions and define our culture:
Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do.

* Our co-founders are Bret Taylor and Clay Bavor. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs.

Earlier, he started and led Google's AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace.

We're looking for a seasoned Customer Trust Enablement professional to join the Security Foundations and GRC team. This is a role for someone with 10+ years experience and has done this work at depth before: you'll turn Sierra's underlying security and compliance posture into assets that accelerate revenue, run the trust-building relationships with our customers' security teams, and stand up the automation that lets us scale enterprise growth without scaling headcount one questionnaire at a time.

A defining part of this role is winning the trust of our most regulated customers: banks, financial institutions, healthcare providers, insurers, and others operating under frameworks like HIPAA, HITRUST, GLBA, and state insurance and privacy regimes. As Sierra expands globally, that scope is increasingly international: you'll navigate cross-border data protection and AI regimes (GDPR, UK GDPR, the EU AI Act, and regional data-residency requirements) and work with customers and regulators across North America, EMEA, and APAC.

To do this well, you'll develop a genuine understanding of what each industry and region is actually accountable for and why, and bring empathy to the obligations your customers carry into every conversation. You'll lead customer security meetings and audits, go toe-to-toe with their risk and security teams on the hard technical questions, and use automation and AI to handle that depth at scale rather than one painstaking review at a time.

That same understanding flows inward: you'll weigh the tradeoffs between customer expectations, deal velocity, and what Sierra can credibly commit to, and translate the patterns you see across regulated buyers into the internal roadmaps that Product, Engineering, and Security GRC build against.

This is a high-leverage, cross-functional role for someone who can set strategy and roll up their sleeves.

What You'll Do

Program Strategy & Execution (Roadmap Ownership)

* Own the Customer Trust roadmap end-to-end, evolving priorities based on company growth, customer needs, and the competitive landscape.

* Drive automation platform strategy: evaluate, implement, and scale AI questionnaire and trust platforms to dramatically improve response times and automation rates.

* Build systematic customer intelligence loops that translate the regulatory drivers and recurring concerns across industries and regions healthcare, insurance, financial services, and global markets into prioritized inputs for the Product, Engineering, and Security GRC roadmaps.

* Define metrics, SLAs, and escalation frameworks for the function, and report on cycle time, coverage, and deal impact to leadership.

* Establish team operating rhythms, metrics reporting, and escalation frameworks.

* Create GTM enablement programs that drive self-service adoption across sales teams, so AEs and Solutions can confidently field first-pass security questions.

Customer & Revenue Enablement

* Develop trust artifacts including security landing pages, whitepapers, industry-specific FAQs, data-flow and architecture overviews, and…