Security GRC Manager: Customer Trust Enablement

What You’ll Do Program Strategy & Execution (Roadmap Ownership)

• Own the Customer Trust roadmap end-to-end, evolving priorities based on company growth, customer needs, and the competitive landscape.
• Drive automation platform strategy: evaluate, implement, and scale AI questionnaire and trust platforms to dramatically improve response times and automation rates.
• Build systematic customer intelligence loops that translate regulatory drivers and recurring concerns across industries and regions into prioritized inputs for the Product, Engineering, and Security GRC roadmaps.
• Define metrics, SLAs, and escalation frameworks for the function, and report on cycle time, coverage, and deal impact to leadership.
• Establish team operating rhythms, metrics reporting, and escalation frameworks.
• Create GTM enablement programs that drive self‑service adoption across sales teams, so AEs and Solutions can confidently field first‑pass security questions.

• Develop trust artifacts including security landing pages, whitepapers, industry‑specific FAQs, data‑flow and architecture overviews, and sales enablement materials.
• Lead responses to enterprise security questionnaires and RFP security sections (SIG, CAIQ, custom frameworks), and serve as the named security point of contact in strategic sales cycles.
• Lead live customer security meetings and audits with highly regulated customers: banks, financial institutions, and healthcare organizations navigating deep technical and regulatory diligence.
• Support complex security contract reviews requiring security expertise, and elevate appropriate issues.

• Identify broken or manual processes, design scalable solutions, and implement the right tools to maximize efficiency without sacrificing quality.
• Apply automation and AI to absorb the volume and depth of regulated‑customer diligence, turning days of manual review into minutes.
• Build and maintain a security knowledge base and questionnaire‑automation workflows so common questions are answered once and reused across the sales org.
• Curate Sierra’s Trust Center so customers can self‑serve answers under NDA.

This role sits in the Security function and works day‑to‑day with:

• Sales, GTM and Agent Development – integrating Customer Trust workflows into the CRM and streamlining due‑diligence processes.
• Security – developing trust artifacts, security content, and scalable response frameworks grounded in Sierra’s actual security posture.
• Legal – collaborating on DPAs, BAAs, security exhibits, and the security and data‑protection terms in customer agreements.
• Product – feeding customer security and compliance signals into roadmap prioritization.
• Executive audiences and customer/prospects – representing Sierra’s security posture in strategic engagements and Field CISO activities.

You may be a good fit if you:

• Have 10+ years of progressive experience in compliance, security operations, or customer trust, with 3+ years building or scaling customer‑facing security programs.
• Have a proven track record managing enterprise security relationships at scale: you’ve personally led customer audits and security meetings, built trust with Fortune 500 CISOs, and balanced rigor with deal velocity.
• Have hands‑on experience selling into or supporting highly regulated buyers in financial services, banks, healthcare, or insurance.
• Understand regulatory landscapes across industries and geographies well enough to identify each’s accountable responsibilities and translate that judgment into clear internal priorities.
• Have experience supporting global customers and navigating international data‑protection and AI regimes (e.g., GDPR, UK GDPR, EU AI Act).
• Have strong technical acumen and can explain complex security architectures, compliance frameworks (NIST 800‑53, SOC 2, ISO 27001, PCI SS, HIPAA), and multi‑cloud implementations (AWS, GCP) in customer‑friendly language.
• Have experience implementing trust automation platforms or building scaled questionnaire‑management processes.
• Can identify broken processes, design scalable solutions, and implement the right tools to maximize efficiency without…