Senior Information Security Governance, Risk and Compliance Analyst, Snowflake
$198-303.6k
+ Bonus & Equity plan
3-5 days a week in office (Menlo Park, CA or Dublin, CA)
AI Data Cloud for data sharing and app building
Be an early applicant
AI Data Cloud for data sharing and app building
1001+ employees
Be an early applicant
$198-303.6k
+ Bonus & Equity plan
3-5 days a week in office (Menlo Park, CA or Dublin, CA)
1001+ employees
Company mission
On a mission to mobilize the world's data.
Role
Who you are
- Ideal candidates are highly motivated individuals who thrive in fast-paced environments, comfortable with modern technology stacks that leverage the cloud, and who see risk as something to manage pragmatically
- Minimum of 10 years of tactical and operational experience in Governance, Risk and Compliance, or Information Security, with a focus on risk assessments/management
- Strong analytical skills along with the ability to effectively communicate complex security related information including risk identification, assessment, and remediation activity
- Knowledge and practical experience with the following risk management frameworks: ISO, NIST, and FAIR
- Experience with creating and utilizing risk KPIs and KRIs with data visualization tooling
- Technical certifications within the area of security and risk are a strong plus (CISSP, CRISC, CISM or equivalent)
- Knowledge and experience pertaining to:
- AWS or Azure or GCP (or similar) cloud security and infrastructure
- Software as a Service (SaaS) applications
- CI/CD pipeline tools (such Github, Jenkins, etc.)
- Network infrastructure security
- Encryption technology and implementation
- Database security
- Operating system security
- Artificial intelligence and machine learning
- Expert, communicator and writer; you can coach others on their writing skills, you can adapt your communication style for your audience, and you have experience drafting policies, reports, and other written materials for a variety of executive audiences
- Knowledge of global cybersecurity, technology and data privacy regulatory requirements
- Experience reporting policy and compliance posture to senior stakeholders
- Ability to direct cross functional work and hold others accountable to committed deadlines
What the job involves
- Snowflake Global Security Compliance and Risk (GSCR) team is focused on ensuring all our Snowflake products and services, and Corporate IT environment are secured, compliant with regulatory requirements and cybersecurity and third-party risks are managed
- Our team works cross-functionally with various key stakeholders (Product Security, Engineering, Corporate IT and Security, Legal, Enterprise Risk Management, and Internal Audit)
- The Senior Cybersecurity Risk and Policy Lead will be a critical and high-impact individual contributor role
- This role will be responsible for managing the cybersecurity risks (identifying, assessing, managing, monitoring and communicating cybersecurity risks) and security policies (facilitate development, maintenance, and evolution of the security policy framework, and work with all security teams to implement, manage and track exceptions to policies, standards, and plans over time)
- Ensure relevant cybersecurity risks identified are captured in the risk register and keep it updated with the related information
- Facilitate risk decomposition (scenario generation) activities with the relevant key stakeholders and document the outcomes
- Develop a broader understanding of the motives, targets and activities of cyber threat actors and manage threat actor profile for Snowflake
- Perform cyber risk assessments on new and existing cyber security risks in partnership with risk owners and subject matter experts
- Analyze cybersecurity risks to determine likelihood and impact to Snowflake business and describe risks in quantitative and qualitative terms
- Develop risk mitigation plan by partnering with the risk and system owners
- Identify and develop appropriate metrics such as key performance indicators (KPIs) and key risk indicators (KRIs) to measure risks and highlight trends or themes
- Track and monitor risk mitigation plan activities with metrics and timeline
- Help make risk-based decisions and trade-offs impacting business strategies
- Help project prioritization for quarterly planning activities that could mitigate the risks
- Develop reports and dashboards to provide an update on risk posture to key stakeholders, risk owners and leadership team
- Maintain a strong understanding of risk management methodologies and frameworks
- Educate and build awareness of cybersecurity risk management across the organization
- Empower key stakeholders and risk owners to use the common risk taxonomy
- Influence behaviors to reduce cybersecurity risk and foster a strong risk-based culture throughout the organization
- Assess, evolve, and drive the policy management framework for all Security policies and standards in partnership with Security teams and Security Risk Management
- Review and make recommendations for streamlining existing and future security policies
- Appropriately assess control design and effectiveness in order to ensure policy and standard enforcement
- Create a process and collateral for rolling out new security policies to the whole company
- Establish, document, and broadly communicate security policy management norms to the Security organization, outlining how to create, maintain, enforce, and deprecate security policies in line with enterprise policy requirements
- Collaborate within Security Compliance, Product Security, Corporate Security, Legal and other partners to incorporate security and compliance requirements into the security policy framework and track policy implementation and issues
- Manage the Security Policy Exception Process to enable Security teams to track exceptions, manage approvals, and improve automation
- Partner with Security Data Analytics team to develop key performance indicators and dashboards to monitor and report on the Security policies
- Utilize people, process and technology in order to build tightly integrated policy tooling into a broad set of security internal tooling
Our take
Developed as a fresh alternative to the archaic systems of data governance and information silos, Snowflake is a frictionless cloud data platform that removes the barriers preventing organizations of all sizes from unleashing the true value of their data.
The company equips organizations with a single, integrated platform that offers the only data warehouse built for the cloud; instant, secure and governed access to their entire network of data; and a core architecture to enable many types of data workloads, including a single platform for developing modern data applications.
Major competitors include Azure, SQL and AWS, and Snowflake has managed to keep ahead of the competition, cementing itself as a global force. Across its 1300+ partners, the company's cloud manages over 250PB of data (with more than 515 million data workloads running every day). Its continued focus on product R&D and partnership expansion have Snowflake well-positioned to manage itself amidst the competition.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 9 rounds)
Feb 2020
$479m
LATE VC
Oct 2018
$450m
LATE VC
Total funding: $1.4bn
Company benefits
- Comprehensive health insurance plans
- Health savings accounts
- Robust retirement plans
- Life and disability insurance
- Weekly online lunch and learns
- Virtual workout classes
- Ergonomic work-from-home equipment
- On-demand mental health and wellness programs
- Fertility benefits and family planning resources
- Generous time-off and various leave plans
- Onsite and Remote Work
- Employee discounts and pre-tax selections
- New hire equity + Employee Stock Purchase Plan (ESPP)
- Quarterly bonus or commission program
Company HQ
Bozeman, MT
Leadership
Benoit Dageville
(Co-Founder)Benoit, a leading expert in parallel execution and self-tuning databases, founded Snowflake after 10+ years at Oracle as a lead architect. He holds a PhD in Computer Science and has 270+ patents.
Thierry Cruanes
(Co-Founder)Thierry is a leading expert in query optimization and parallel execution. He has a PhD in Computer Science with a focus in Database Systems and is a named inventor on 200+ patents.
Sridhar Ramaswamy
(Chief Executive Officer)Sridhar joined Snowflake in 2023 via the Neeva acquisition as SVP of AI and later became CEO. He co-founded Neeva and previously led Google’s Ads business, growing it from $1.5B to $100B.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 202 more jobs at Snowflake