Sr. Global Security Compliance Analyst at Snowflake Computing
Dublin, CA 94568
About the Job
Build the future of data
Join the Snowflake team.Snowflake is seeking a Senior Security Compliance Analyst to join our Global Security Compliance & Risk team and help drive compliance across Product Engineering and Corporate Engineering. The Sr
Security Compliance Analyst will be a critical and high-impact individual contributor who would perform compliance risk assessments, guide control owners to follow security and compliance best practices along with monitoring effectiveness of the controls
This role will report to the Security Compliance Manager within the Security and IT organizations.JOB RESPONSIBILITIES :Conduct Compliance Risk Assessments / Compliance Impact Assessments ( CIA) of cloud based applications against all control domains (NIST or similar)
Analyze project documentation like architecture diagrams and conduct interviews to perform risk and gap assessmentDetermine impact of new projects/changes on security & compliance posture of the organization.Provide compliance and control requirements to new projectsProvide compliant implementation standards/ best practices to achieve control requirementsIntegrate compliance and security into solution designs.Assess risks of security gaps, and develop remediation plans
Perform follow up activities related to drive remediation efforts.Support design and implementation of automated tools for compliance
Design self service oriented solutions for scaling compliance operations and derive repeatable audit artifacts.Provide Audit Support as required.Engage with Engineering teams for readiness assessments, testing, control review for annual and on-going compliance audits (like SOX, ISO, SOC)
Provide compliance consultation to design effective and complaint processes.Identify risks, process improvements and design automated monitoring solutions for control areas like Change Management,Release Management, SDLC, Configuration Management, Logging, Software Supply Chain
Drive implementation of effective controls.Assist with development of compliance documentation, policies and processes in support of requirements and ensure that controls are operating effectively. Develop a close partnership with engineering to educate and inform them around priority and importance of compliance requirements
Ability to identify risk-appropriate control implementation solutions while considering engineering and business priorities with compliance needs.Work cross-functionally to drive security control implementation for the organization.QUALIFICATIONS:7+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry
Big 4 consulting experience is a plus.Minimum 3 years prior experience auditing cloud environments (AWS, Azure, and GCP), performing compliance assessments , conducting risk assessments and / or driving audits like SOX,ISO, SOC, PCI DSSAbility to multitask and manage simultaneous projectsAbility to organize, conduct and drive meetings and outcomes independently. Must be aware of and deliver quality stakeholder engagement experience in a fast-paced, innovative environmentStrong analytical, communication (verbal and written), and project management skillsAbility to learn, understand, and work with new emerging technologies, methodologies, and solutions in the Cloud/IT technology space.Certification preferred in one or more of the following: CISA, CISSP, CISM, Cloud platforms such as AWS, Azure or GCPLOCATION:San Mateo, ability to support global teams based in India & PolandEvery Snowflake employee is expected to follow the company’s confidentiality and security standards for handling sensitive data
Snowflake employees must abide by the company’s data security plan as an essential part of their duties
It is every employee's duty to keep customer information secure and confidential.The following represents the expected range of compensation for this role: The estimated base salary range for this role is $148,000 - $199,500.Additionally, this role is eligible to participate in Snowflake’s bonus and equity plan.The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location
This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth
We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake
How do you want to make your impact?Job SummaryJob number:
Join the Snowflake team.Snowflake is seeking a Senior Security Compliance Analyst to join our Global Security Compliance & Risk team and help drive compliance across Product Engineering and Corporate Engineering. The Sr
Security Compliance Analyst will be a critical and high-impact individual contributor who would perform compliance risk assessments, guide control owners to follow security and compliance best practices along with monitoring effectiveness of the controls
This role will report to the Security Compliance Manager within the Security and IT organizations.JOB RESPONSIBILITIES :Conduct Compliance Risk Assessments / Compliance Impact Assessments ( CIA) of cloud based applications against all control domains (NIST or similar)
Analyze project documentation like architecture diagrams and conduct interviews to perform risk and gap assessmentDetermine impact of new projects/changes on security & compliance posture of the organization.Provide compliance and control requirements to new projectsProvide compliant implementation standards/ best practices to achieve control requirementsIntegrate compliance and security into solution designs.Assess risks of security gaps, and develop remediation plans
Perform follow up activities related to drive remediation efforts.Support design and implementation of automated tools for compliance
Design self service oriented solutions for scaling compliance operations and derive repeatable audit artifacts.Provide Audit Support as required.Engage with Engineering teams for readiness assessments, testing, control review for annual and on-going compliance audits (like SOX, ISO, SOC)
Provide compliance consultation to design effective and complaint processes.Identify risks, process improvements and design automated monitoring solutions for control areas like Change Management,Release Management, SDLC, Configuration Management, Logging, Software Supply Chain
Drive implementation of effective controls.Assist with development of compliance documentation, policies and processes in support of requirements and ensure that controls are operating effectively. Develop a close partnership with engineering to educate and inform them around priority and importance of compliance requirements
Ability to identify risk-appropriate control implementation solutions while considering engineering and business priorities with compliance needs.Work cross-functionally to drive security control implementation for the organization.QUALIFICATIONS:7+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry
Big 4 consulting experience is a plus.Minimum 3 years prior experience auditing cloud environments (AWS, Azure, and GCP), performing compliance assessments , conducting risk assessments and / or driving audits like SOX,ISO, SOC, PCI DSSAbility to multitask and manage simultaneous projectsAbility to organize, conduct and drive meetings and outcomes independently. Must be aware of and deliver quality stakeholder engagement experience in a fast-paced, innovative environmentStrong analytical, communication (verbal and written), and project management skillsAbility to learn, understand, and work with new emerging technologies, methodologies, and solutions in the Cloud/IT technology space.Certification preferred in one or more of the following: CISA, CISSP, CISM, Cloud platforms such as AWS, Azure or GCPLOCATION:San Mateo, ability to support global teams based in India & PolandEvery Snowflake employee is expected to follow the company’s confidentiality and security standards for handling sensitive data
Snowflake employees must abide by the company’s data security plan as an essential part of their duties
It is every employee's duty to keep customer information secure and confidential.The following represents the expected range of compensation for this role: The estimated base salary range for this role is $148,000 - $199,500.Additionally, this role is eligible to participate in Snowflake’s bonus and equity plan.The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location
This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth
We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake
How do you want to make your impact?Job SummaryJob number:
7626133002
Date posted : 2024-10-04Profession: SecurityEmployment type: Full Time 