Security Technical Program Manager

ABOUT US Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. WHAT YOU’LL DO - Drive high-impact security and infrastructure initiatives end-to-end. Lead complex, cross-functional programs spanning cloud infrastructure, platform security, identity and access management, detection and response, vulnerability management, and secure software delivery from problem definition through execution and sustained outcomes. - Own execution, planning, and program health. Be accountable for sequencing work, managing dependencies, tracking risk, and ensuring delivery of Sierra’s most critical security programs, with clear milestones and outcomes. - Help shape Sierra’s security strategy. Partner with security and engineering leadership to define priorities, investment areas, and execution plans that align risk reduction with platform growth, customer trust, and long-term scalability. - Build and strengthen security foundations. Drive programs that establish durable security primitives such as identity boundaries, access controls, logging and detection baselines, incident readiness, and secure defaults that future teams and features can confidently build on. - Translate ambiguity into clear execution. Decompose loosely defined security, risk, and compliance challenges particularly in emerging AI domains into structured programs, prioritized workstreams, and measurable outcomes. - Lead communication and alignment. Provide clear updates to leadership on program health, risks, dependencies, and tradeoffs; surface issues early and drive cross-functional alignment. WHO YOU'LL WORK WITH - Engineering: Infrastructure, Data Platform and Agent SDK engineers to shape technical requirements, manage dependencies, and deliver resilient systems. - Security & GRC: Security engineering, risk, compliance, and privacy partners to align on threat models, control strategy, audits, and risk management in a rapidly evolving AI landscape. - Product and GTM: Product, Agent Development, and Sales to operationalize security commitments and respond to sophisticated customer and regulator expectations. - Legal: On security terms, third-party risk, and contractual obligations. - Executive Leadership: Senior leaders who rely on you for clarity, prioritization, and confidence in Sierra’s security strategy and execution. WHAT YOU'LL BRING - Experience running security-focused technical programs in fast-growing SaaS or platform environments. - Strong technical fluency across cloud infrastructure, IAM, infrastructure as code, observability, secure CI/CD, and incident response. - Ability to execute through ambiguity, prioritize effectively, and keep teams moving. - Comfort operating in environments where things aren’t fully built yet and helping decide what needs to be built first. - Clear, concise communication with senior technical and business leaders. - A collaborative, pragmatic style with high ownership and high agency. EVEN BETTER... - Experience scaling security programs globally in AI-first or data-intensive SaaS environments. - Exposure to emerging AI risk, data governance, or agent and model-related security considerations. - Experience supporting security initiatives in public-sector, regulated and/or multi-cloud environments (AWS, GCP, Azure). - Relevant security, cloud, AI or technical program management certifications. - Familiarity with regulatory and compliance frameworks (ISO 27001, PCI DSS, FedRAMP, HIPAA) OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company f