← All roles

Senior Technical Compliance Analyst

Snorkel AI· 312 - Engineering
Apply on company site
Hybrid (San Francisco, CA), Hybrid (New York City, NY)$150k - $220khybridPosted 2mo ago

About the role

Hands-on, builder-minded senior technical compliance analyst to support Snorkel AI's Trust & Security program by maintaining SOC 2 Type II posture, advancing from Type I to II, and laying groundwork toward CMMC 2.0 for federal contracts; influence architecture, automate policy enforcement, and provide verifiable evidence to enable enterprise sales.

Responsibilities

  • Drafting accurate, technically precise responses to RFPs, security questionnaires (CAIQ, SIG, custom risk assessments), and customer portals.
  • Own and continuously update the 'Library of Truth'—a repository of pre-vetted security evidence, configurations, and policy documents.
  • Retrieve granular evidence and draft narratives on AWS KMS encryption, logging pipelines, IAM privilege escalation, etc.
  • Partner with IT, Security, Product, Engineering, and Delivery early in development to bake in compliance by design.
  • Write, update, and operationalize security policies that translate SOC 2 and NIST controls into developer tasks.
  • Automate policy enforcement in CI/CD pipelines where possible.
  • Conduct lightweight compliance enablement sessions with engineering teams.
  • Drive and coordinate end-to-end SOC 2 Type I and Type II audit cycles; manage audit schedules and remediation of findings.
  • Be the power-user of GRC stack (Vanta, Drata); automate evidence collection and monitor controls.
  • Manage compliance ticketing in Jira; execute quarterly User Access Reviews, security awareness training, phishing simulations, and Risk Acceptance/Exception process.
  • Build and maintain compliance dashboards (KPIs/KRIs) for Security Lead and executive team; track audit readiness scores and control health trends.
  • Oversee annual policy review and attestation cycle.
  • Align controls with federal standards (NIST SP 800-53, NIST SP 800-171 Rev 3, FedRAMP, CMMC 2.0); draft early System Security Plans (SSPs) and POA&Ms.
  • Own third-party vendor reviews for federal supply chain requirements.
  • Preserve audit-relevant evidence and draft post-incident reports during security incidents.

Qualifications

  • 7+ years of experience in technical compliance, IT audit, or GRC in SaaS or fast-paced startup environment.
  • Proven end-to-end experience supporting external SOC 2 Type I and Type II audits, with expertise auditing IT General Controls (Change Management, Logical Access, System Operations).
  • Strong understanding of cloud infrastructure (AWS/GCP/Azure), IAM, CI/CD pipelines, encryption standards, and vulnerability management; ability to read Terraform plans or AWS Config rules and interpret compliance impact.
  • Experience operating automated compliance platforms (Vanta, Drata), tracking work in Jira, and security awareness platforms (KnowBe4).
  • Business-enabler mindset; practice 'Yes, if...' security; ability to negotiate secure alternatives without blocking releases.
  • Exceptional written and verbal communication skills; ability to explain technical controls to customers and business risks to engineers.

Skills

Required:SOC 2 Type I & II auditsIT General Controls (ITGC)Cloud platforms (AWS/GCP/Azure)IAM, encryption, CI/CD, vulnerability management
Last updated Sep 30, 2026. Interested? Apply on the company site.

About Snorkel AI

Shaping how AI learns through better data

Snorkel AI delivers the highest quality specialized datasets for frontier LLMs and enterprise models.

AI data development servicesAboutApplied AI solutionsCareersCompanyContact usCustomer storiesData development services
Company profileWebsite

More open roles at Snorkel AI