Where Data Does More. Join the Snowflake team.Snowflake is looking for a Senior Security Risk Analyst to join our Global Security Compliance & Risk team and help manage and improve on the existing program for assessing the risk of third party tools and services in use by Snowflake. You will be responsible for managing the intake process, working with constituents to collect the required information, collecting all necessary details to understand the use case for each tool or service, and reviewing the required documentation and evidence to meet the security controls required based on the use case. You will help identify and manage Third Party security risk to protect Snowflake assets.AS THE SENIOR SECURITY RISK ANALYST - TPRM, YOU WILL:Independently perform ongoing third party security risk assessments to help Snowflake identify and evaluate security risks and provide comprehensive evaluations and actionable recommendations based on security and compliance best practicesSupport and monitor remediation efforts of identified gaps, perform remediation audit to validate the closureReview all evidence provided to compare vendor security controls to Snowflake data protection requirementsAssess and manage security findings from various vendor security monitoring systemsDevelop and improve security documentationWork cross-functionally to ensure team objectives are achievedTake risk-based approach to review and negotiate security agreementMeasure effectiveness of the program and ensure SLA is metEstablish points of view, negotiate the point of view, and drive outcomes effectively with stakeholders.OUR IDEAL SENIOR SECURITY RISK ANALYST - TPRM WILL HAVE:6+ years of experience in security compliance role with 3+ years previous experience in third party security riskHighly motivated individuals who thrive in fast-paced environmentsUnderstanding of a broad set of security best practices (e.g., application security, secure software development lifecycles, risk management, data protection, encryption & key management, identity and access management, security operations, security governance, network security, etc.) and technologiesFlexibility to work during different time zonesExceptional communication skills, including proficiency in writing, summarizing and presenting technical documents, policies, procedures, and assessment reportsDeep understanding and experience with multiple industry regulations, standards such as PCI-DSS, HIPAA, SOC1, SOC2, GDPR, and/or ISO standards and frameworks and ability to determine applicabilityPrevious role that requires exceptional organizational skills. Ability to analyze, organize and prioritize multiple tasks and meet deadlinesTechnical competence sufficient to understand and explain complicated security concepts to various Snowflake stakeholders possessing varying levels of cybersecurity skill and understandingSelf-motivated problem solver who is comfortable engaging with high paced and complex environmentWork independently as well as collaboratively within a team environment. Ability to translate ambiguous directives into relevant action items and deliverablesAbility to think strategically and plan effectively, with attention to details and a strong ownership ethic and intense focus on accuracy and accountabilityAbility to lead meeting with internal stakeholders and/or external third-party to achieve desired outcomes independentlyExtremely high ethical standards as proven by successful background checks and referencesPrevious experience working with a variety of personalities from a variety of culturesBONUS POINTS FOR EXPERIENCE WITH THE FOLLOWING:Proficiency in use of JIRA, Confluence, and ServiceNowProven experience in reviewing and negotiating security agreementsSecurity certification, such as CISSP, CCSP, CISAAWS, Azure, Google Cloud, or other major Cloud Provider experienceSnowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.How do you want to make your impact?For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information:
