SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Snowflake is hiring a Senior Compliance Analyst for its SnowTrust GRC (Governance, Risk, and Compliance) team. This role owns the full lifecycle of customer-facing and third-party assessments, from scope definition and project planning through delivery of complex initiatives. You will be the primary point of contact for customer due diligence questionnaires, security audits, and regulatory inquiries, serving as a trusted advisor on Snowflake's security and compliance posture. You will also join sales conversations to articulate Snowflake's security and compliance capabilities to prospects.
Key responsibilities include:
**Customer Trust & Due Diligence:** Respond to customer questionnaires and audits regarding Snowflake's security and compliance obligations. Develop deep expertise in Snowflake's control environment, security features, and deployment best practices. Advise customers and regulators on security and compliance documentation and obligations.
**Third-Party Risk Management:** Conduct security risk assessments of new and existing vendors, evaluating their posture against contractual, regulatory, and industry standards. Partner with Legal and Procurement to embed security requirements into vendor contracts and agreements. Continuously refine the TPRM program by improving tiering criteria, streamlining intake processes, and reducing assessment turnaround times. Monitor the vendor risk landscape for emerging threats and proactively reassess affected vendors. Support customer and regulator inquiries about Snowflake's own third-party risk management as part of audit engagements.
You will work cross-functionally with IT, Business, Procurement, Security, and Compliance teams, as well as with leadership, to deliver vendor and customer projects in your portfolio.
**Requirements:**
- 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402 (preferred)
- Experience in vendor risk management, third-party risk, procurement security, or a related GRC function
- Detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators
- Ability to manage high volume of concurrent vendor assessments while maintaining consistent turnaround times
- Strong written and verbal communication skills to explain compliance concepts to technical and non-technical stakeholders
- Experience using AI to automate or streamline manual compliance workflows
**Bonus qualifications:**
- CISSP, CRISC, CISA, or other GRC/security certifications
- Experience with TPRM or GRC tooling (OneTrust, ServiceNow, Prevalent, Vanta)
- Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA)
- Experience with regulated-industry vendor requirements (PCI DSS, HIPAA, FedRAMP supply-chain provisions)
