Snowflake

Senior Compliance Analyst, Customer Trust

US-CA-Menlo Park, Remote. Posted a month ago

The role

You will own the full lifecycle of customer-facing and third-party assessments. You will work with IT, Business, Procurement, Security, and Compliance teams to deliver vendor and customer projects.

What you will do

  • Respond to customer due diligence questionnaires and audits about security and compliance obligations.
  • Become an expert on security features and best practices for customer deployments.
  • Serve as a trusted advisor on customer and regulator inquiries.
  • Join sales conversations to explain security and compliance capabilities.
  • Conduct security risk assessments of new and existing vendors.
  • Partner with Legal and Procurement to ensure security requirements are in vendor contracts.
  • Improve the TPRM program by refining tiering criteria and streamlining intake.
  • Monitor the vendor risk landscape for emerging threats.
  • Support inquiries about third-party risk management practices during audit engagements.

Required qualifications

  • Experience in vendor risk management, third-party risk, procurement security, or a related GRC function.
  • A detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators.
  • Ability to manage a high volume of concurrent vendor assessments.
  • Strong written and verbal communication skills.
  • Experience using AI to automate or streamline manual compliance workflows.

Nice to have

  • 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402
  • CISSP, CRISC, CISA, or other GRC or security certifications
  • Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta
  • Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA)
  • Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions

About the company

Snowflake is powering the era of the agentic enterprise. The company is growing fast and scaling its team to enable and accelerate growth.

Senior Compliance Analyst, Customer Trust at Snowflake | JobZoey