SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Snowflake is seeking a Senior Compliance Analyst, Governance Programs to join the SnowTrust GRC team. This is a highly visible role focused on defining and scaling governance programs, strengthening compliance architecture, and partnering across IT, Legal, Product, Security, and Engineering to enhance security posture and build customer trust globally.
Key Responsibilities:
- Build deep understanding of regulated-industry compliance requirements and their application to Snowflake's platform and operations.
- Establish and run programs managing Snowflake's compliance posture, including readiness assessment, external communication of compliance status, and leadership of customer and regulator audits.
- Develop expertise in Snowflake's control environment, security features, and best practices for customer deployments.
- Serve as trusted advisor on Snowflake's security and compliance obligations, responding to customer and regulator inquiries with authoritative guidance.
- Create self-service resources enabling customers and field teams to independently answer compliance questions.
- Participate in sales conversations to articulate Snowflake's security and compliance capabilities.
- Lead cross-functional initiatives to drive control implementation and remediation across Engineering, IT, Legal, and Security teams.
The role emphasizes translating governance requirements into practical, adoptable controls and processes—going beyond policy authorship to ensure operational teams actually implement solutions. You will also explore using AI to automate or streamline manual compliance workflows.
Requirements:
- 5+ years of experience in risk management, compliance, GRC, or related governance function (preferred).
- Proven program management experience, including leading cross-functional initiatives without direct authority.
- Experience writing and maintaining governance artifacts (policies, standards, procedures, guidelines).
- Ability to influence stakeholders across Engineering, IT, Legal, and Security to drive control implementation and remediation.
- Solid knowledge of at least one recognized governance or risk framework (ISO 27001, SOC 1/SOC 2, or NIST CSF).
- Demonstrated ability to translate governance requirements into practical controls and processes that operational teams adopt.
- Experience using AI to automate or streamline manual compliance workflows.
- US Personhood required (due to nature of covered federal data and government authorization work).
Bonus qualifications:
- CISSP, CRISC, CISA, or other information security certifications.
- Experience with NIST 800-53 or HIPAA.
