S

Snorkel AI

Builds training data and test environments for AI

Senior Technical Compliance Analyst

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time$150k - $220k

About the Job

Requirements

  • At least 7 years of experience in technical compliance, IT audit, or governance, risk, and compliance within a SaaS or fast-paced startup environment.
  • Proven end-to-end experience supporting external SOC 2 Type I and Type II audits, with specific expertise auditing IT General Controls, including Change Management, Logical Access, and System Operations.
  • Strong understanding of modern cloud infrastructure across AWS, Google Cloud Platform, or Azure; identity and access management; continuous integration and continuous delivery pipelines; encryption standards; and vulnerability management.
  • Ability to read a Terraform plan or an AWS Config rule and interpret its compliance impact.
  • Experience operating automated compliance platforms such as Vanta or Drata, tracking work in Jira, and using a security awareness platform such as KnowBe4.
  • Ability to explain technical controls to customers and business risks to engineers.

Responsibilities

  • Draft accurate, technically precise responses to requests for proposals, security questionnaires such as CAIQ and SIG, custom risk assessments, and customer portals.
  • Own and continuously update a repository of pre-vetted security evidence, technical configurations, and policy documents, keeping it audit-ready and enabling rapid responses to enterprise prospects.
  • Retrieve detailed evidence about customer inquiries such as AWS Key Management Service encryption, logging pipelines, and identity and access management privilege escalation paths, and draft written narratives for the Security and Legal teams.
  • Partner with IT, Security, Product, Engineering, and Delivery early in the development lifecycle; review new features, infrastructure changes, and vendor integrations; and influence architectural decisions to incorporate compliance by design.
  • Write, update, and operationalize security policies, translating SOC 2 and National Institute of Standards and Technology controls into developer-friendly tasks such as identity and access management hardening, log retention, and Zero Trust implementation.
  • Automate policy enforcement in continuous integration and continuous delivery pipelines where possible.
  • Conduct compliance enablement sessions with engineering teams on self-service evidence collection and interpreting compliance requirements.
  • Drive and coordinate end-to-end SOC 2 Type I and Type II audit cycles across business entities, manage audit schedules, coordinate with external auditors, and drive remediation of findings.
  • Automate evidence collection using governance, risk, and compliance tools, continuously monitor technical controls, and eliminate manual spreadsheet tracking.
  • Manage the compliance ticketing queue in Jira; execute quarterly User Access Reviews, security awareness training, and phishing simulations; and manage the Risk Acceptance and Exception process.
  • Build and maintain compliance dashboards of key performance and risk indicators for the Security Lead and executive team, tracking audit readiness scores, remediation service-level agreements, and control health trends.
  • Manage the annual policy review and attestation cycle, ensuring process owners review, sign off, and update documentation on schedule.
  • Assist the Security Team in aligning current controls with NIST SP 800-53, NIST SP 800-171 Rev 3, FedRAMP, and CMMC 2.0; help draft System Security Plans and Plans of Action and Milestones.
  • Own the third-party vendor review process, assessing critical cloud, human resources information system, and customer relationship management partners against federal supply chain requirements.
  • Support security incident response by preserving audit-relevant evidence, documenting event chronologies, and drafting post-incident reports for regulatory and audit requirements.

About the Company

cb

Snorkel AI

Builds training data and test environments for AI

Snorkel AI builds training datasets and simulated work environments for AI labs and companies developing models and software agents. Its data products combine expert demonstrations, scoring rules, and quality checks, while runnable environments let agents practice tasks such as coding or using business software. The company pairs domain specialists with its own data development technology to generate examples, evaluate model behavior, and refine weak areas through repeated feedback. Customers buy ready-made datasets or commission tailored data and evaluation work, and enterprises also use its specialized agent solutions. Snorkel AI was founded in 2019 and is headquartered in San Francisco, California.

Company size
201-500
Company stage
Late Stage VC
Total funding
$586.2M
Headquarters
San Francisco, CA
Founded
2019

Recently Posted Jobs

Explore more opportunities at Snorkel AI

See more jobs