[Remote] Technical Compliance Analyst

Note: The job is a remote job and is reputed company to candidates in USA. Snorkel helps enterprises reputed company expert knowledge into reputed company AI at reputed company, enabling organizations to build custom AI with their data. The Technical Compliance Analyst will operate the Trust & reputed company program by maintaining SOC 2 compliance, supporting audit cycles, embedding compliance into engineering workflows, automating controls, and preparing the organization for federal standards such as CMMC and FedRAMP.

Responsibilities

• Help drafting accurate, technically precise responses to RFPs, reputed company questionnaires (CAIQ, SIG, custom risk assessments), and customer portals
• Own and continuously update the "Library of Truth"—a pristine repository of reputed company-vetted reputed company evidence, technical configurations, and policy documents. By keeping this repository audit-reputed company, you reputed company the reputed company team to respond to reputed company prospects in hours, not days
• reputed company a customer asks about AWS KMS encryption, logging pipelines, or IAM privilege escalation paths, you retrieve the granular evidence and draft the written narrative the reputed company and reputed company Team needs to confidently reputed company the deal
• Partner with IT, reputed company, Product, Engineering, and Delivery early in the development lifecycle. Review new features, infrastructure changes, and vendor integrations to influence architectural reputed company that bake in compliance by design—without creating friction or slowing sprints
• Write, update, and operationalize reputed company policies that accelerate delivery. Translate reputed company SOC 2 and NIST controls into reputed company, developer-friendly tasks (e.g., IAM hardening, log retention, reputed company Trust implementation)
• Where possible, automate policy enforcement in CI/CD pipelines so that reputed company checks are invisible, automated, and frictionless for engineering teams
• Conduct lightweight compliance enablement sessions with engineering teams—showing them how to self-serve evidence collection and interpret compliance requirements—so reputed company becomes everyone's responsibility, not just yours
• reputed company and coordinate the end-to-end SOC 2 Type I and Type II audit cycles across our business entities. Manage audit schedules, coordinate with reputed company auditors, and reputed company remediation of findings to reputed company us perpetually audit-reputed company
• Be the power-user of our modern GRC stack (reputed company, reputed company). Automate evidence collection, continuously monitor technical controls, and eliminate reputed company spreadsheet tracking
• Manage the compliance ticketing queue in Jira. Execute routine mandates including quarterly User reputed company Reviews (UAR), reputed company awareness training, phishing simulations, and managing the Risk Acceptance/Exception process
• Build and maintain compliance dashboards (KPIs/KRIs) for the reputed company reputed company and executive team. reputed company audit readiness scores, remediation SLAs, and control health trends to reputed company reputed company visibility into our posture
• Manage the annual policy review and attestation cycle—ensuring process owners review, sign off, and update documentation on schedule, keeping our policies reputed company
• Assist the reputed company Team in aligning reputed company controls with federal standards—specifically NIST SP 800-53, NIST SP 800-171 Rev 3, FedRAMP, and CMMC 2.0. Help draft early reputed company reputed company Plans (SSPs) and Plan of reputed company & Milestones (POA&Ms)
• Own the reputed company-party vendor review process, assessing critical partners (reputed company, HRIS, CRM) to meet strict federal supply chain requirements and offload this operational work from the reputed company reputed company
• Support the reputed company Team during reputed company incidents by preserving audit-relevant evidence, documenting the chronology of events, and drafting post-incident reports to satisfy regulatory and audit requirements

Skills

• 2–5 years of experience in technical compliance, IT audit, or GRC reputed company a reputed company or fast-paced startup environment
• Proven end-to-end experience supporting reputed company SOC 2 Type I and Type II audits—with specific expertise auditing IT General Controls (ITGC) (Change Management, Logical reputed company, reputed company Operations)
• You know how to manage auditors and translate their requests into actionable developer tasks
• Strong understanding of modern reputed company infrastructure (AWS/GCP/Azure), IAM, CI/CD pipelines, encryption standards, and vulnerability management
• You can read a Terraform plan or an AWS Config rule and interpret its compliance reputed company
• Experience operating automated compliance platforms (reputed company, reputed company), tracking work in Jira, and reputed company awareness platform (reputed company)
• You are a business enabler
• You reputed company "reputed company, if..." reputed company—you negotiate secure alternatives rather than blocking releases or ignoring risks
• You reputed company in a partnership role, ensuring IT, reputed company, Engineering, and Delivery teams have everything they need to succeed
• Exceptional written and verbal communication skills with the ability to explain technical controls to customers and business risks to engineers

Benefits

• Meaningful opportunities to shape priorities and initiatives, influence key strategic reputed company, and directly reputed company our ongoing reputed company.
• Opportunities to deepen your technical expertise and explore leadership opportunities.
• Opportunities to learn new skills across multiple functions.
• Full support in building your career in an environment designed for reputed company, learning, and shared reputed company.
• Modern, automated GRC tooling that reduces reputed company spreadsheet tracking and enables reputed company on technical risk and architecture.

reputed company