Senior Security Assurance Specialist at Snyk

Ottawa, Ontario, Canada -

Full Time

Start Date

Immediate

Expiry Date

22 Dec, 25

Salary

0.0

Posted On

23 Sep, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

GRC, Security Assurance, Compliance, SaaS, Third-Party Risk Management, ISO 27001, SOC 2, NIST CSF, GDPR, FedRAMP, Jira, Vanta, Communication Skills, Technical Presentation, Risk Assessment, Vendor Management

Industry

Computer and Network Security

Description

Snyk is the leader in secure AI software development, helping millions of developers develop fast and stay secure as AI transforms how software is built. Our AI-native Developer Security Platform integrates seamlessly into development and security workflows, making it easy to find, fix, and prevent vulnerabilities — from code and dependencies to containers and cloud. Our mission is to empower every developer to innovate securely in the AI era — boosting productivity while reducing business risk. We’re not your average security company - we build Snyk on One Team, Care Deeply, Customer Centric, and Forward Thinking. It’s how we stay driven, supportive, and always one step ahead as AI reshapes our world. Why this role? Join a high-impact team that protects Snyk’s global risk posture while enabling revenue growth. This role combines customer security assurance with third-party risk management in one expanded opportunity. You will partner with Sales, Legal, Engineering, Security and Procurement, showcase Snyk’s security capabilities to enterprise customers and use advanced AI tools to keep our programs ahead of the curve. What You’ll Do: Lead customer security and compliance calls that help close deals worldwide. Use AI platforms such as Vanta and Gemini to streamline and improve GRC operations. Manage the third-party risk lifecycle including onboarding, assessments, contract reviews, monitoring and off-boarding. Collaborate with Product, Security, Engineering and Sales to resolve complex security requests. Respond to due-diligence questions and present security concepts clearly to technical and business audiences. Review vendor evidence such as SOC 2 and ISO 27001, assign risk tiers and schedule periodic reviews. Maintain the Trust Portal ensuring FAQs and assurance materials are accurate and current, and reviewing and approving access requests. What You Bring: Minimum 5 years experience in GRC, security assurance or compliance, ideally within a SaaS environment. Proven experience supporting enterprise sales cycles and engaging directly with customers. Hands-on third-party risk management expertise. Working knowledge of ISO 27001, ISO 27017, SOC 2, NIST CSF or 800-53, GDPR and FedRAMP. Familiarity with Jira workflows and GRC platforms such as Vanta. Strong communication skills with the ability to simplify technical topics for diverse audiences. It’d Be Awesome If You Also… Have a CISSP, CISA, CISM or CGRC and maybe a few others you picked up “for fun.” Enjoy experimenting with AI tools and prompt engineering to make work smarter. Love finding creative ways to simplify security concepts for any audience. Thrive in lively discussions and keep collaboration upbeat, even on a deadline. #LI-CH2 We care deeply about the warm, inclusive environment we’ve created and we value diversity – we welcome applications from those typically underrepresented in tech. If you like the sound of this role but are not totally sure whether you’re the right person, do apply anyway! About Snyk Snyk is committed to creating an inclusive and engaging environment where our employees can thrive as we rally behind our common mission to make the digital world a safer place. From Snyk employee resource groups, to global benefits that help our employees prioritize their health, wellness, financial security, and a work/life blend, we aim to support our employees along their entire journeys here at Snyk. Benefits & Programs Prioritize health, wellness, financial security, and life balance with programs tailored to your location and role. Flexible working hours, work-from home allowances, in-office perks, and time off for learning and self development Generous vacation and wellness time off, country-specific holidays, and 100% paid parental leave for all caregivers Health benefits, employee assistance plans, and annual wellness allowance Country-specific life insurance, disability benefits, and retirement/pension programs, plus mobile phone and education allowances

Responsibilities

Lead customer security and compliance calls to help close deals worldwide while managing the third-party risk lifecycle. Collaborate with various teams to resolve complex security requests and maintain the Trust Portal.