Snowflake

Senior Compliance Analyst, Customer Trust

US-CA-Menlo Park, Remote. Posted a month ago

The role

You will own the full lifecycle of customer-facing and third-party assessments. You will work with IT, Business, Procurement, Security, and Compliance teams to deliver vendor and customer projects.

What you will do

  • Respond to customer due diligence questionnaires and audits about security and compliance obligations.
  • Become an expert on security features and best practices for customer deployments.
  • Serve as a trusted advisor on customer and regulator inquiries.
  • Join sales conversations to explain security and compliance capabilities.
  • Conduct security risk assessments of new and existing vendors.
  • Partner with Legal and Procurement to ensure security requirements are in vendor contracts.
  • Improve the TPRM program by refining tiering criteria and streamlining intake.
  • Monitor the vendor risk landscape for emerging threats.
  • Support inquiries about third-party risk management practices during audit engagements.

Required qualifications

  • Experience in vendor risk management, third-party risk, procurement security, or a related GRC function.
  • A detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators.
  • Ability to manage a high volume of concurrent vendor assessments.
  • Strong written and verbal communication skills.
  • Experience using AI to automate or streamline manual compliance workflows.

Nice to have

  • 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402
  • CISSP, CRISC, CISA, or other GRC or security certifications
  • Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta
  • Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA)
  • Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions

About the company

Snowflake is powering the era of the agentic enterprise. The company is growing fast and scaling its team to enable and accelerate growth.