Job description

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Customer Trust for our SnowTrust GRC team. You will own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity. You will work daily with IT, Business, Procurement, Security, and Compliance teams, and regularly with leadership, to deliver the vendor and customer projects in your portfolio. AS A SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST AT SNOWFLAKE, YOU WILL: Customer Trust - Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations. - Become an expert on Snowflake's control environment, security features, and best practices for customer deployments. - Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation. - Join sales conversations to explain Snowflake's security and compliance capabilities. Third-Party Oversight, Governance, and Risk Management - Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements. - Partner with Legal and Procurement to make sure security requirements are reflected in vendor contracts and security agreements. - Continuously improve the TPRM program by refining tiering criteria, streamlining intake, and shortening assessment turnaround times. - Monitor the vendor risk landscape for emerging threats and proactively reassess affected vendors. - Support customer and regulator inquiries about Snowflake's own third-party risk management practices as part of broader audit engagements. OUR IDEAL SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST WILL HAVE: - 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402 preferred. - Experience in vendor risk management, third-party risk, procurement security, or a related GRC function. - A detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators on these assessments. - Ability to manage a high volume of concurrent vendor assessments while keeping turnaround times consistent. - Strong written and verbal communication skills, with the ability to explain compliance concepts to technical and non-technical stakeholders. - Experience using AI to automate or streamline manual compliance workflows. BONUS POINTS FOR THE FOLLOWING: - CISSP, CRISC, CISA, or other GRC or security certifications - Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta - Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA) - Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. How do you want to make your impact? For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com careers.snowflake.com

Requirements

Must-haves

AS A SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST AT SNOWFLAKE, YOU WILL:
Customer Trust
Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations.
Become an expert on Snowflake's control environment, security features, and best practices for customer deployments.
Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation.
Join sales conversations to explain Snowflake's security and compliance capabilities.
Third-Party Oversight, Governance, and Risk Management
Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements.
Partner with Legal and Procurement to make sure security requirements are reflected in vendor contracts and security agreements.
Continuously improve the TPRM program by refining tiering criteria, streamlining intake, and shortening assessment turnaround times.
Monitor the vendor risk landscape for emerging threats and proactively reassess affected vendors.
Support customer and regulator inquiries about Snowflake's own third-party risk management practices as part of broader audit engagements.
OUR IDEAL SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST WILL HAVE:
Experience in vendor risk management, third-party risk, procurement security, or a related GRC function.
A detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators on these assessments.
Ability to manage a high volume of concurrent vendor assessments while keeping turnaround times consistent.
Strong written and verbal communication skills, with the ability to explain compliance concepts to technical and non-technical stakeholders.
Experience using AI to automate or streamline manual compliance workflows.
CISSP, CRISC, CISA, or other GRC or security certifications
Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta
Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA)
Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions
How do you want to make your impact?

Nice-to-haves

5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402 preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Vision