Senior Compliance Analyst, Customer Trust

Snowflake

. Own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity .

Posted 10/8/2026full-timeMenlo Park • California • United StatesSenior💰 $152,000 - $218,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vendor risk management and compliance, with a strong focus on security assessments and regulatory requirements. Proficient in managing multiple concurrent assessments while effectively communicating compliance concepts to diverse stakeholders.

Highest-signal resume keywords

Vendor Risk ManagementTechnical Audit ExperienceCompliance Programs (SOC 2, ISO, PCI DSS)Security Certifications (CISSP, CRISC, CISA)TPRM Tooling Experience (OneTrust, ServiceNow)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk AssessmentIT Control EvaluationDue Diligence QuestionnairesCompliance Workflows AutomationRegulatory Requirements (GDPR, CCPA)

Soft Skills

Strong Written CommunicationStrong Verbal Communication

Tools & Technologies

OneTrustServiceNowPrevalentVanta

Certifications & Qualifications

CISSPCRISCCISA

Industry Keywords

Third-Party Risk ManagementGovernance, Risk, and Compliance (GRC)CybersecurityVendor Data PrivacyRegulated-Industry Compliance

Tech Stack

Tools & technologies

ServiceNow

About the role

Key responsibilities & impact

Own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity
Work daily with IT, Business, Procurement, Security, and Compliance teams, and regularly with leadership, to deliver vendor and customer projects
Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations
Become an expert on Snowflake's control environment, security features, and best practices for customer deployments
Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation
Join sales conversations to explain Snowflake's security and compliance capabilities
Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements
Partner with Legal and Procurement to ensure security requirements are reflected in vendor contracts and security agreements
Improve the TPRM program by refining tiering criteria, streamlining intake, and shortening assessment turnaround times
Monitor the vendor risk landscape for emerging threats and proactively reassess affected vendors
Support customer and regulator inquiries about Snowflake's third-party risk management practices during broader audit engagements

Requirements

What you’ll need

5+ years of technical audit or compliance experience with programs such as SOC 2, ISO certifications, PCI DSS, C5, Cyber Essentials Plus, or IT audits based on ISAE 3402 preferred
Experience in vendor risk management, third-party risk, procurement security, or a related GRC function
Detailed understanding of evaluating the design and effectiveness of IT controls, collecting evidence, and working with auditors and regulators on assessments
Ability to manage a high volume of concurrent vendor assessments while keeping turnaround times consistent
Strong written and verbal communication skills, with the ability to explain compliance concepts to technical and non-technical stakeholders
Experience using AI to automate or streamline manual compliance workflows
CISSP, CRISC, CISA, or other GRC or security certifications are bonus points
Experience with TPRM or GRC tooling, such as OneTrust, ServiceNow, Prevalent, or Vanta is a bonus
Experience with sub-processor management and vendor data privacy obligations (GDPR, CCPA) is a bonus
Experience with regulated-industry vendor requirements, such as PCI DSS, HIPAA, or FedRAMP supply-chain provisions is a bonus