Technical Compliance Analyst

Snorkel AI

Technical Compliance Analyst strengthening Snorkel AI’s SOC 2 posture and federal-readiness roadmap. Automating GRC evidence, audit operations, and compliance controls for enterprise AI data platforms.

Posted 8/21/2026full-timeNew York City • California, New York • 🇺🇸 United StatesJuniorMid-Level💰 $120,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in technical compliance and IT audit processes, with a strong focus on SOC 2 Type I and Type II audits, cloud infrastructure compliance, and policy automation. Proficient in managing compliance documentation, conducting training sessions, and collaborating with cross-functional teams to ensure adherence to security standards.

Highest-signal resume keywords

SOC 2 Type I And Type II Audit ExperienceAWS KMS EncryptionCI/CD Pipeline AutomationVanta Or Drata ExperienceTechnical Compliance Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Technical ComplianceIT AuditGRCIAMEncryption StandardsVulnerability ManagementTerraformAWS ConfigAudit ReadinessSecurity Policy Development

Soft Skills

Exceptional Written CommunicationVerbal CommunicationCollaborationTraining FacilitationProblem-Solving

Tools & Technologies

JiraVantaDrataKnowBe4Cloud Infrastructure

Industry Keywords

NIST SP 800-53NIST SP 800-171 Rev 3FedRAMPCMMC 2.0IT General Controls

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformTerraform

About the role

Key responsibilities & impact

Draft technically precise responses to RFPs, security questionnaires, and customer portals
Own and continuously update the audit-ready repository of security evidence, technical configurations, and policy documents
Retrieve technical evidence on AWS KMS encryption, logging pipelines, and IAM privilege escalation paths
Partner with IT, Security, Product, Engineering, and Delivery on compliance-by-design architectural decisions
Write, update, and operationalize security policies and translate SOC 2/NIST controls into developer-friendly tasks
Automate policy enforcement in CI/CD pipelines
Conduct compliance enablement sessions for engineering teams
Coordinate end-to-end SOC 2 Type I and Type II audit cycles across business entities
Manage audit schedules, external auditors, and remediation of findings
Automate evidence collection and monitor technical controls using Vanta and Drata
Manage the Jira compliance ticketing queue
Execute quarterly User Access Reviews, security awareness training, phishing simulations, and Risk Acceptance/Exception processes
Build and maintain compliance KPI/KRI dashboards and report audit readiness, remediation SLAs, and control health trends
Manage annual policy review and attestation cycles
Assist with alignment to NIST SP 800-53, NIST SP 800-171 Rev 3, FedRAMP, and CMMC 2.0
Draft early System Security Plans and Plans of Action & Milestones
Own third-party vendor reviews for cloud, HRIS, and CRM providers
Support security incidents by preserving evidence, documenting event chronology, and drafting post-incident reports

Requirements

What you’ll need

2–5 years of experience in technical compliance, IT audit, or GRC within a SaaS or fast-paced startup environment
Proven end-to-end experience supporting external SOC 2 Type I and Type II audits
Expertise auditing IT General Controls (ITGC), including Change Management, Logical Access, and System Operations
Strong understanding of modern cloud infrastructure (AWS/GCP/Azure), IAM, CI/CD pipelines, encryption standards, and vulnerability management
Ability to read a Terraform plan or an AWS Config rule and interpret its compliance impact
Experience operating Vanta or Drata
Experience tracking work in Jira
Experience with KnowBe4 or a security awareness platform
Exceptional written and verbal communication skills
Ability to explain technical controls to customers and business risks to engineers

Benefits

Comp & perks

Direct revenue impact through enabling enterprise sales
Automated, scalable compliance programs and modern GRC tooling
Future-proof career growth with hands-on FedRAMP/CMMC exposure
Meaningful opportunities to shape priorities and initiatives
Opportunities to influence strategic decisions
Support for building a career through growth, learning, and shared success
Reasonable accommodation for individuals with disabilities
Equal employment opportunities