Sierra College
Vendor Security Manager
San Francisco, CA · Contract
Sponsorship not specified$53k-$800kDetected 49 days ago
AWSGCPPlatform EngineeringMachine LearningLLMsCybersecurityDetection EngineeringComplianceSalesforceSupply ChainProcurementAR/VRLeadership
About the role
- We're looking for a Vendor Security Manager to join Sierra's Security team.
- This is a hands-on role that requires both technical depth and strong judgment.
- You'll help Sierra make informed trade-offs between speed, scale, and security in a business that moves fast and operates in regulated industries.
Responsibilities
- Be the interface between Security and Sierra teams on everything vendor security related, drive risk conversations, and keep the program moving.
- Own vendor security risk decisions and escalation paths end-to-end, including clear documentation of risk acceptance rationale, mitigation plans, and trade-offs.
- Build and continuously improve the vendor security program methodology, tooling, risk tiering, monitoring, and response, scaling it intelligently as Sierra's vendor footprint grows.
- Assess and manage security risk across Sierra's full third-party landscape, recognizing that vendors, strategic partners, and contractors carry distinct risk profiles and require tailored oversight.
- A technology partner with deep API integration is a different security conversation than a SaaS tool or a contractor with scoped environment access - the program you build should reflect that.
- Conduct deep, evidence-based security assessments across Sierra's vendor landscape SaaS providers, cloud and infrastructure partners, AI and model providers, and strategic suppliers including reviewing architectures, IAM configurations, access scopes, and vulnerability assessments.
- Develop assessment frameworks for AI and model vendors that address risks specific to how these systems actually work including prompt data handling, training data practices, inference infrastructure access, and model supply chain integrity.
- Develop and maintain a model provider oversight program that reflects Sierra's reality of working across a constellation of LLM and AI model vendors.
- Think in blast radius. Understand what's reachable if they're compromised data flows, network adjacency, privilege scope, lateral movement paths and let that analysis drive technical controls and contractual requirements.
- Build detection logic and automated alerting that fires when a vendor's security posture degrades lapsed certifications, exposed services, configuration drift, or new vulnerability disclosures so Sierra's response is proactive.
Compensation
- These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans.
Benefits
- We want our benefits to reflect our values and offer the following to full-time employees:
- Flexible (unlimited) paid time off
- Medical, dental, and vision benefits for you and your family
- Life insurance and disability benefits
- Retirement plan dependent on country of employment
- Parental leave
- Fertility and family building benefits through Carrot
- Discretionary benefit stipend giving people the ability to spend where it matters most
- These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans.
- Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies.
- Develop dashboards and reporting that give leadership real visibility into vendor risk posture, remediation velocity, assessment coverage, and aging findings.
Company info
- At Sierra, we're creating a platform to help businesses build better, more human customer experiences with AI. We are primarily an in-person company based in San Francisco, with growing offices in Atlanta, New York, London, Paris, Madrid, Munich, Singapore, Tokyo, and Sydney.
- We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do.
- Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google's AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace.
- At Sierra, we're creating a platform to help businesses build better, more human customer experiences with AI.
- We are primarily an in-person company based in San Francisco, with growing offices in Atlanta, New York, London, Paris, Madrid, Munich, Singapore, Tokyo, and Sydney.
- We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and Family.
- These values are the foundation of our work, and we are committed to upholding them in everything we do.
- Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/.
- Bret currently serves as Board Chair of OpenAI.
- Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook.
- Bret was also one of Google's earliest product managers and co-creator of Google Maps.
- Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs.
- Earlier, he started and led Google's AR/VR effort, Project Starline, and Google Lens.
- Before that, Clay led the product and design teams for Google Workspace.
Visa & Work Authorization
- gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class
Apply directly at Sierra College →Create a free account for alerts like thisView Sierra College immigration profile
This listing is sourced directly from Sierra College's careers page and normalized into a canonical job model.