Sr. Global Security Compliance & Risk Analyst

Build the future of the AI Data Cloud. Join the Snowflake team.

Snowflake is seeking a Senior Security Compliance Analyst to join our Global Security Compliance & Risk team and help drive compliance across Product Engineering and Corporate Engineering.

The Sr. Security Compliance Analyst will be a critical and high-impact individual contributor who would guide control owners to follow security and compliance best practices along with monitoring effectiveness of the controls. This role will report to the Security Compliance Manager within the Security and IT organizations.

JOB RESPONSIBILITIES :

• Support Snowflake business teams to achieve and maintain their security and compliance posture in accordance with regulatory requirements including but not limited to Sarbanes Oxley (SOX), SOC, ISO 27001, ISO, HIPAA, PCI-DSS, HITRUST, FedRAMP, etc. Validate on-going compliance of policies and process / procedures in support of requirements and ensure that controls are operating effectively.

• Drive implementation and maturity of security controls, and the resolution of controls deficiencies and gaps,  by working closely with  Engineering, Product, IT, Security, and TPM teams.

• Achieve and maintain a comprehensive understanding of new and emerging compliance requirements and control gaps or risks. 

• Review architecture, integrate compliance and security into solution designs, assess risks of security gaps, and develop remediation plans. Perform follow up activities related to remediation of gaps , and drive remediation efforts.

• Advise process/control owners with the preparation and ongoing maintenance of controls and control documentation (e.g., policies, procedures, compliance narratives, and RBAC matrices)

• Ensure timely delivery of the necessary evidence to the audit teams to support our audit cycle.

• Identify process improvements and efficiencies in the existing processes to build robust processes, automate compliance and drive implementation of effective controls.

QUALIFICATIONS:

• 8+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry. 

• Prior experience assessing or auditing cloud environments (AWS, Azure, and GCP), SaaS platforms, performing compliance assessments , conducting risk assessments and / or driving audits like SOX,ISO, SOC, PCI DSS, FedRAMP

• Ability to work independently, manage multiple priorities, and work on multiple projects. Excellent organizational skills and critical attention to detail and deadlines

• Ability to organize, conduct and drive meetings and outcomes independently.  Must be aware of and deliver quality stakeholder engagement experience in a fast-paced, innovative environment

• Strong analytical, communication (verbal and written), and program management skills

• Ability to learn, understand, and work with new emerging technologies, methodologies, and solutions in the Cloud technology space.

• Knowledge of key IAM focus areas, including identity management solutions, access revocation, entitlements management and reconciliation, and account monitoring. Understanding of identity and authentication principles and technologies.

• Understanding of vulnerability management processes and technologies

• Certification preferred in one or more of the following: CISA, CISSP, CISM, Cloud platforms such as AWS, Azure or GCP

• Demonstrated ability to self-direct project outcomes, with minimal supervision to achieve goals

• Ability to work closely with auditors, regulators, and internal stakeholders and articulate technical concepts

LOCATION:

• US, ability to support , attend meetings with Poland / Pune based team as required

Every Snowflake employee is expected to follow the company’s confidentiality and security standards for handling sensitive data. Snowflake employees must abide by the company’s data security plan as an essential part of their duties. It is every employee's duty to keep customer information secure and confidential.

Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?

For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com