Senior Compliance Analyst, Customer Trust
About The Position
At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Customer Trust for our SnowTrust GRC team. You will own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity. You will work daily with IT, Business, Procurement, Security, and Compliance teams, and regularly with leadership, to deliver the vendor and customer projects in your portfolio.
Requirements
- 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402 preferred.
- Experience in vendor risk management, third-party risk, procurement security, or a related GRC function.
- A detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators on these assessments.
- Ability to manage a high volume of concurrent vendor assessments while keeping turnaround times consistent.
- Strong written and verbal communication skills, with the ability to explain compliance concepts to technical and non-technical stakeholders.
- Experience using AI to automate or streamline manual compliance workflows.
Nice To Haves
- CISSP, CRISC, CISA, or other GRC or security certifications
- Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta
- Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA)
- Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions
Responsibilities
- Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations.
- Become an expert on Snowflake's control environment, security features, and best practices for customer deployments.
- Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation.
- Join sales conversations to explain Snowflake's security and compliance capabilities.
- Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements.
- Partner with Legal and Procurement to make sure security requirements are reflected in vendor contracts and security agreements.
- Continuously improve the TPRM program by refining tiering criteria, streamlining intake, and shortening assessment turnaround times.
- Monitor the vendor risk landscape for emerging threats and proactively reassess affected vendors.
- Support customer and regulator inquiries about Snowflake's own third-party risk management practices as part of broader audit engagements.
Benefits
- For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
