Director of Enterprise Security Trust, Snowflake

• 10+ years of experience in security governance, risk, and compliance (GRC), with a strong focus on security certifications and audit management
• Proven track record of successfully leading organizations through complex security certifications, compliance, and security governance (e.g., FedRAMP, ISO 27001, SOC 2, PCI DSS)
• Deep understanding of commercial and public sector security compliance frameworks and requirements
• Experience engaging with and influencing regulatory bodies
• Strong knowledge of audit methodologies and experience managing external audit relationships
• Strong understanding of leveraging data and automation to deliver high efficiency and quality audits
• Demonstrated ability to build, lead, and develop high-performing teams
• Exceptional communication, interpersonal, collaboration, and presentation skills, with the ability to articulate complex security and compliance concepts to diverse audiences
• Ability to thrive in a fast-paced, dynamic, and rapidly growing environment
• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred
• Relevant industry certifications such as CISM, CISA, CISSP, or equivalent are highly desirable

Desirable

• Snowflake is seeking a highly experienced and strategic Director, Enterprise Security Trust, specializing in Certifications and Audit
• This pivotal role will be responsible for leading Snowflake's efforts in achieving and maintaining a broad spectrum of security certifications, navigating complex public sector compliance, influencing regulatory standards, and working with others to drive the realization of optimized security audit and certifications
• Reporting directly to the Senior Director of Security Trust, this role will be instrumental in enabling new markets and workloads, and fostering and maintaining trust with Snowflake's global customer base
• Commercial Certifications: Lead strategy, execution, and maintenance of all commercial security certifications (e.g., ISO 27001, SOC 2 Type 2, PCI DSS)
• This includes managing and optimizing the entire certification lifecycle, from initial assessment and readiness to audit execution and ongoing compliance
• Public Sector Certifications: Lead our Public Sector team to drive the acquisition and maintenance of critical public sector certifications and authorizations (e.g., FedRAMP, CMMC, DoD SRG) to enable Snowflake's expansion into government and regulated industries
• Regulator Influence: Working with Strategic Market Enablement and Commercial and Govmt Public Relations stakeholders, define and help execute a regulator-influencer strategy - actively engaging with regulatory bodies, industry working groups, and standards organizations to influence the development of security frameworks and ensure Snowflake's voice is heard in evolving compliance landscapes
• Statutory Audit: Oversee all statutory security audits, coordinating with internal teams and external auditors to ensure timely and successful completion. This includes financial audits, privacy audits, and other legally mandated assessments
• Auditor Management: Build and maintain strong relationships with external audit firms, manage and optimize audit engagements and global delivery models, and ensure efficient and effective delivery and collaboration throughout the audit process
• Automation and AI: Co-develop, champion, implement and drive strategies to streamline audit processes, improve control and audit effectiveness, reduce audit fatigue, and leverage automation. Establish and help drive AI across security audit, certification, and compliance
• Metrics and Reporting: Establish and drive certification and audit team operations metrics that helps leadership identify and prioritize opportunities for improved execution
• Work with teams and leadership to provide executive-level reporting and communications across all certification and security audit areas
• Establish and ensure risk reporting and remediation from security certification and audit processes. Leverage Snowflake's capabilities for robust data analysis, reporting, and driving data-driven insights to optimize security certifications and audit processes
• People Development: Lead, mentor, and grow a team of security professionals focused on certifications, audit, and compliance