Senior Compliance Analyst, Customer Trust

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work.

We are hiring a Senior Compliance Analyst, Customer Trust for our SnowTrust GRC team. You will own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity.

AS A SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST AT SNOWFLAKE, YOU WILL:

Customer Trust

• Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations.
• Become an expert on Snowflake's control environment, security features, and best practices for customer deployments.
• Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation.
• Join sales conversations to explain Snowflake's security and compliance capabilities.

Third-Party Oversight, Governance, and Risk Management

• Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements.
• Partner with Legal and Procurement to make sure security requirements are reflected in vendor contracts and security agreements.
• Continuously improve the TPRM program by refining tiering criteria, streamlining intake, and shortening assessment turnaround times.
• Monitor the vendor risk landscape for emerging threats and proactively reassess affected vendors.
• Support customer and regulator inquiries about Snowflake's own third-party risk management practices as part of broader audit engagements.

OUR IDEAL SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST WILL HAVE:

• 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402 preferred.
• Experience in vendor risk management, third-party risk, procurement security, or a related GRC function.
• A detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators on these assessments.
• Ability to manage a high volume of concurrent vendor assessments while keeping turnaround times consistent.
• Strong written and verbal communication skills, with the ability to explain compliance concepts to technical and non-technical stakeholders.
• Experience using AI to automate or streamline manual compliance workflows.

BONUS POINTS FOR THE FOLLOWING:

• CISSP, CRISC, CISA, or other GRC or security certifications
• Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta
• Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA)
• Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions