← All roles

Senior Compliance Analyst, Snowgov Compliance

Snowflake Inc.· Engineering
Apply on company site
Hybrid (US-CA-Menlo Park), Hybrid (US-VA-McLean)$152k - $218.5kFull-timePosted 2w ago

About the role

Senior Compliance Analyst for Snowgov Compliance within Snowflake's SnowTrust GRC team, focusing on public sector compliance initiatives, FedRAMP, and government market growth.

Responsibilities

  • Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually.
  • Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and remediation commitments through closure with clear ownership and realistic deadlines.
  • Coordinate annual 3PAO assessments and continuous monitoring, acting as the primary liaison between Snowflake, assessors, and federal agency stakeholders.
  • Advise Engineering and Operations teams so cloud configurations (FIPS 140-3 validation, boundary protection, access control, logging and monitoring) meet federal and DoD mandates.
  • Perform gap analyses for new or evolving public sector requirements, such as emerging CMMC or GovRAMP mandates and FedRAMP Consolidated Rules, and define technical remediation roadmaps.
  • Respond to customer and regulator inquiries about Snowflake's public sector security and compliance obligations, and build self-service resources so customers and field teams can increasingly answer these questions themselves.

Qualifications

  • 5+ years of experience in risk management, compliance, GRC, or a related governance function within a regulated or public sector environment preferred.
  • Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process.
  • Experience contributing to SSPs, POA&Ms, contingency plans (ISCP), and incident response plans (IRP).
  • Experience writing and maintaining audit-ready governance artifacts, including policies, standards, procedures, and control narratives.
  • Experience coordinating with 3PAOs, auditors, or assessors during annual assessments or continuous monitoring cycles.
  • Ability to influence stakeholders across Engineering, IT, Legal, and Security to drive control implementation and remediation without direct authority.
  • Strong organizational skills, with the ability to manage multiple concurrent audit and assessment timelines and track findings through closure.
  • Experience using AI to automate or streamline manual compliance workflows.
  • US Personhood required (due to nature of covered federal data and government authorization work)
  • BONUS: CISSP, CISM, CISA, or other information security certifications
  • BONUS: Experience with DoD Impact Level authorizations and CMMC certification

Skills

Required:FedRAMP authorization processNIST SP 800-53 controlsSSP (System Security Plan)POA&M managementISCP/IRP3PAO coordinationStakeholder influence
Nice to have:AI-enabled compliance automation
Last updated Oct 15, 2026. Interested? Apply on the company site.

About Snowflake Inc.

The Data Platform Built for Data Teams.

Snowflake powers AI, data engineering, applications, and analytics on a trusted, scalable AI Data Cloud—eliminating silos and accelerating innovation.

AIData CloudData EngineeringAnalyticsApplications & Collaboration
Company profileWebsite

More open roles at Snowflake Inc.