Senior Compliance Analyst, Customer Trust

Location: Menlo Park, California, United States; hybrid

Salary: $152,000–$218,500 per year

Company

Snowflake is scaling its SnowTrust GRC team to support customer trust, security, compliance, and third-party risk management.

What you will do

• Own the full lifecycle of multiple customer-facing and third-party assessments, including scope definition, project planning, and delivery management.
• Respond to customer due diligence questionnaires and audits concerning security and compliance obligations.
• Advise customers, regulators, sales teams, and internal stakeholders on security controls, compliance documentation, and deployment best practices.
• Conduct security risk assessments for new and existing vendors against contractual, regulatory, and industry requirements.
• Partner with Legal and Procurement to incorporate security requirements into vendor contracts and agreements.
• Improve the third-party risk management program by refining tiering, streamlining intake, monitoring threats, and reducing assessment turnaround times.

Requirements

• 5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or ISAE 3402-based IT audits.
• Experience in vendor risk management, third-party risk, procurement security, or a related GRC function.
• Strong understanding of IT control design and effectiveness, evidence collection, and collaboration with auditors and regulators.
• Ability to manage a high volume of concurrent vendor assessments while maintaining consistent turnaround times.
• Strong written and verbal communication skills for technical and non-technical stakeholders.
• Experience using AI to automate or streamline manual compliance workflows.

Nice to have

• CISSP, CRISC, CISA, or another GRC or security certification.
• Experience with TPRM or GRC tools such as OneTrust, ServiceNow, Prevalent, or Vanta.
• Experience with sub-processor management and vendor privacy obligations under GDPR or CCPA.
• Experience with regulated-industry vendor requirements, including PCI DSS, HIPAA, or FedRAMP supply-chain provisions.

Culture & Benefits

• Work in an AI-native environment with an experimental approach to improving how work gets done.
• Collaborate across IT, Business, Procurement, Security, Compliance, Legal, and leadership teams.
• Contribute to a fast-growing organization focused on challenging conventional approaches and accelerating innovation.