Senior Global Security & Compliance Analyst, Snowflake

• Self-motivated problem solver who is eager to identify and learn the latest security technologies and methods to ensure that Snowflake is highly impervious to malicious threat actors and exploitation attempts
• Be comfortable engaging within a high-paced and complex engineering environment
• Technical cloud solutions and security controls competence sufficient to understand and explain complicated security concepts to various Snowflake stakeholders possessing varying levels of cybersecurity skill and understanding
• Strong experience with the NIST Risk Management Framework (RMF), with an understanding and practical knowledge of the full NIST 800-53 High Security Controls Catalog
• Experience with cloud computing concepts and architectures
• Experience working with and implementing security controls within two or more of the following cybersecurity frameworks: PCI-DSS, SOC 1/2, HITRUST, ISO 27001, FedRAMP, GDPR
• Experience with global certs such as Cyber Essentials Plus (CE+), Germany C5, Canada Protected B, or Australia IRAP, is a plus

Desirable

• The role of Senior Global Security & Compliance Analyst is a high-visibility, internal-facing individual contributor role within the Snowflake Security team, responsible for three primary objectives:
• Partner with internal Snowflake product development, engineering, and operations teams to develop and implement rigorous and effective technical and operational cybersecurity controls within our Snowflake Service product and our organization
• Support Snowflake Global Security Compliance & Risk (GSCR) programs, projects, compliance obligations, and audits, ensuring that the Snowflake Data Cloud product and internal security services adhere to the widest selection of cybersecurity regulatory and compliance frameworks
• Support market expansion by partnering to driving design and implementation of requirements with partners across Snowflake
• As a Senior Global Security & Compliance Analyst you will:
• Perform and document control and requirement gap analysis for new certifications against existing Snowflake control posture
• Work closely with Product and Engineering teams to develop Product Requirements Documents (PRDs) to support compliance market expansion
• Achieve and maintain a comprehensive understanding of new and emerging compliance requirements and control gaps or risks
• Drive implementation and maturity of security controls, and the resolution of controls deficiencies and gaps, by working closely with Engineering, Product, IT, Security, and TPM teams
• Ensure timely delivery of the necessary evidence to the audit teams to support our audit cycle
• Drive timely and transparent communication and reporting on progress on key deliverables, priorities, goals, and issues across the team and stakeholders
• Support the development and operation of automated security compliance tools by regularly engaging with stakeholders to develop effective means to monitor, alert, and report on the security posture of the Snowflake Data Cloud in real time
• Become an expert on the customer enabled security features available within the Snowflake Data Cloud product, including best practices for implementation of regulatory required security features
• Coordinate with personnel across the GSCR team to ensure achievement of overall team objectives in the areas of customer trust, internal and external audit, change management, risk assessment and management, vulnerability management, and security training