Senior Technical Compliance Analyst, Snorkel AI
$150-220k
3 days a week in office
The AI data research lab
Be an early applicant
The AI data research lab
501-1000 employees
Be an early applicant
$150-220k
3 days a week in office
501-1000 employees
Company mission
To empower everyone to solve their most impactful problems through data-centric AI.
Role
Who you are
- Experience: 2–5 years of experience in technical compliance, IT audit, or GRC within a SaaS or fast-paced startup environment
- Audit Mastery: Proven end-to-end experience supporting external SOC 2 Type I and Type II audits—with specific expertise auditing IT General Controls (ITGC) (Change Management, Logical Access, System Operations). You know how to manage auditors and translate their requests into actionable developer tasks
- Technical Acumen: Strong understanding of modern cloud infrastructure (AWS/GCP/Azure), IAM, CI/CD pipelines, encryption standards, and vulnerability management. You can read a Terraform plan or an AWS Config rule and interpret its compliance impact
- Tooling: Experience operating automated compliance platforms (Vanta, Drata), tracking work in Jira, and security awareness platform (KnowBe4)
- Mindset: You are a business enabler. You practice "Yes, if..." security—you negotiate secure alternatives rather than blocking releases or ignoring risks. You thrive in a partnership role, ensuring IT, Security, Engineering, and Delivery teams have everything they need to succeed
- Communication: Exceptional written and verbal communication skills with the ability to explain technical controls to customers and business risks to engineers
What the job involves
- We are seeking a hands-on, builder-minded Senior Technical Compliance Analyst to serve as the operational engine behind our Trust & Security program
- You will maintain our SOC 2 Type II posture, drive our second entity from Type I to Type II, and act as the bridge between compliance requirements and engineering & delivery execution
- You will also lay the technical groundwork to evolve us toward **CMMC 20**, ensuring we are ready for federal contracts without slowing down our product velocity
- The Engine Behind Revenue: Help drafting accurate, technically precise responses to RFPs, security questionnaires (CAIQ, SIG, custom risk assessments), and customer portals
- Repository Stewardship: Own and continuously update the "Library of Truth"—a pristine repository of pre-vetted security evidence, technical configurations, and policy documents. By keeping this repository audit-ready, you enable the Security team to respond to enterprise prospects in hours, not days
- Technical Depth on Demand: When a customer asks about AWS KMS encryption, logging pipelines, or IAM privilege escalation paths, you retrieve the granular evidence and draft the written narrative the Security and Legal Team needs to confidently close the deal
- Compliance Partner: Partner with IT, Security, Product, Engineering, and Delivery early in the development lifecycle. Review new features, infrastructure changes, and vendor integrations to influence architectural decisions that bake in compliance by design—without creating friction or slowing sprints
- Policy as Guardrails: Write, update, and operationalize security policies that accelerate delivery. Translate abstract SOC 2 and NIST controls into clear, developer-friendly tasks (e.g., IAM hardening, log retention, Zero Trust implementation)
- Compliance-as-Code: Where possible, automate policy enforcement in CI/CD pipelines so that security checks are invisible, automated, and frictionless for engineering teams
- Enablement, Not Enforcement: Conduct lightweight compliance enablement sessions with engineering teams—showing them how to self-serve evidence collection and interpret compliance requirements—so security becomes everyone's responsibility, not just yours
- Audit Lifecycle Management: Drive and coordinate the end-to-end SOC 2 Type I and Type II audit cycles across our business entities. Manage audit schedules, coordinate with external auditors, and drive remediation of findings to keep us perpetually audit-ready
- GRC Automation: Be the power-user of our modern GRC stack (Vanta, Drata). Automate evidence collection, continuously monitor technical controls, and eliminate manual spreadsheet tracking
- Operational Cadences: Manage the compliance ticketing queue in Jira. Execute routine mandates including quarterly User Access Reviews (UAR), security awareness training, phishing simulations, and managing the Risk Acceptance/Exception process
- Metrics & Reporting: Build and maintain compliance dashboards (KPIs/KRIs) for the Security Lead and executive team. Track audit readiness scores, remediation SLAs, and control health trends to provide clear visibility into our posture
- Policy Governance: Manage the annual policy review and attestation cycle—ensuring process owners review, sign off, and update documentation on schedule, keeping our policies evergreen
- Foundation for Federal Growth: Assist the Security Team in aligning current controls with federal standards—specifically NIST SP 800-53, NIST SP 800-171 Rev 3, FedRAMP, and CMMC 2.0. Help draft early System Security Plans (SSPs) and Plan of Action & Milestones (POA&Ms)
- Supply Chain Risk Management (C-SCRM): Own the third-party vendor review process, assessing critical partners (Cloud, HRIS, CRM) to meet strict federal supply chain requirements and offload this operational work from the Security Lead
- Incident Readiness: Support the Security Team during security incidents by preserving audit-relevant evidence, documenting the chronology of events, and drafting post-incident reports to satisfy regulatory and audit requirements
Our take
Demand for AI is increasing in almost every industry, but the machine learning that fuels it is tedious to set up. In order to train machine learning algorithms, training data must be labelled manually, and this contributes to expenses in time, money and resources when integrating AI within a business.
Snorkel AI develops programmatic approaches to data labelling in order to automate the setup process of machine learning and decrease the required timeframe for a business to begin providing AI services. In addition to these automated data categorization services, the company also integrates data training, management, and analysis into a unified AI-deployment platform.
The complex computer science behind AI setup has resulted in many businesses without computer science backgrounds being left behind, and Snorkel AI has set this as their target audience. And recently, the company raised some serious funding which it plans to use to expand the company's engineering, research, and go-to-market efforts.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-13% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
May 2025
$100m
SERIES D
Aug 2021
$85m
SERIES C
Total funding: $235m
Company benefits
- Health: Snorkelers and their dependents are covered by comprehensive medical, dental, and vision plans.
- Wellness: All Snorkelers get a yearly wellness stipend to use on anything related to health and well-being.
- PTO and rest days: We provide unlimited personal time off so you can find your work-life balance. Plus, two company-wide rest days per quarter in addition to company holidays.
- One global team: From our headquarters in Redwood City, CA, to regional offices in San Francisco and New York, we work together as one global team.
- Events: Get to know your fellow Snorkelers outside of work! We host regular events and learning opportunities for our teams across our offices and virtually to connect, have fun, and grow.
- Family leave: Snorkel offers generous parental leave for both birthing and non-birthing parents based on eligibility.
Company HQ
Centennial, Redwood City, CA
Leadership
Alex Ratner
(Co-Founder & CEO)Studied at Harvard and received a PhD from Stanford. They are also an Assistant Professor at the University of Washington.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 29 more jobs at Snorkel AI