# Senior Compliance Analyst, Customer Trust

**Company**: Snowflake
**Location**: Menlo Park, CA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: Full time
**Salary**: $152K – $218.5K
**Category**: Engineering
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/snowflake/132a2e95-7ec0-488c-94d2-b0917c597ef9?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_f17459cf-0a8

## Description

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work.

We are hiring a Senior Compliance Analyst, Customer Trust for our SnowTrust GRC team. You will own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity.

### AS A SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST AT SNOWFLAKE, YOU WILL:

**Customer Trust**

- Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations.

- Become an expert on Snowflake's control environment, security features, and best practices for customer deployments.

- Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation.

- Join sales conversations to explain Snowflake's security and compliance capabilities.

**Third-Party Oversight, Governance, and Risk Management**

- Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements.

- Partner with Legal and Procurement to make sure security requirements are reflected in vendor contracts and security agreements.

- Continuously improve the TPRM program by refining tiering criteria, streamlining intake, and shortening assessment turnaround times.

- Monitor the vendor risk landscape for emerging threats and proactively reassess affected vendors.

- Support customer and regulator inquiries about Snowflake's own third-party risk management practices as part of broader audit engagements.

### OUR IDEAL SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST WILL HAVE:

- 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402 preferred.

- Experience in vendor risk management, third-party risk, procurement security, or a related GRC function.

- A detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators on these assessments.

- Ability to manage a high volume of concurrent vendor assessments while keeping turnaround times consistent.

- Strong written and verbal communication skills, with the ability to explain compliance concepts to technical and non-technical stakeholders.

- Experience using AI to automate or streamline manual compliance workflows.

### BONUS POINTS FOR THE FOLLOWING:

- CISSP, CRISC, CISA, or other GRC or security certifications

- Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta

- Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA)

- Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions

## Skills

### Required
- SOC 2
- ISO certifications
- PCI DSS
- C5
- Cyber Essentials Plus
- ISAE 3402
- vendor risk management
- third-party risk
- procurement security
- GRC function
- IT controls
- AI automation

### Nice to have
- CISSP
- CRISC
- CISA
- OneTrust
- ServiceNow
- Prevalent
- Vanta
- GDPR
- CCPA
- HIPAA
- FedRAMP

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/snowflake/132a2e95-7ec0-488c-94d2-b0917c597ef9?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)