Senior Compliance Analyst, Snowgov Compliance

At Snowflake, we are powering the era of the agentic enterprise. We seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work.

We are hiring a Senior Compliance Analyst, Snowgov Compliance for our SnowTrust GRC team. You will champion key public sector compliance initiatives, safeguard Snowflake's US public sector certifications, and align IT, Legal, Product, Security, and Engineering around the work that powers Snowflake's growth in government markets.

Responsibilities

As a Senior Compliance Analyst, Snowgov Compliance at Snowflake, you will:

• Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually.
• Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and remediation commitments through closure with clear ownership and realistic deadlines.
• Coordinate annual 3PAO assessments and continuous monitoring, acting as the primary liaison between Snowflake, assessors, and federal agency stakeholders.
• Advise Engineering and Operations teams so cloud configurations meet federal and DoD mandates.
• Perform gap analyses for new or evolving public sector requirements and define technical remediation roadmaps.
• Respond to customer and regulator inquiries about Snowflake's public sector security and compliance obligations.

Requirements

Our ideal Senior Compliance Analyst, Snowgov Compliance will have:

• 5+ years of experience in risk management, compliance, GRC, or a related governance function within a regulated or public sector environment.
• Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process.
• Experience contributing to SSPs, POA&Ms, contingency plans, and incident response plans.
• Experience writing and maintaining audit-ready governance artifacts.
• Experience coordinating with 3PAOs, auditors, or assessors during annual assessments or continuous monitoring cycles.
• Ability to influence stakeholders across Engineering, IT, Legal, and Security.
• Strong organizational skills, with the ability to manage multiple concurrent audit and assessment timelines.
• Experience using AI to automate or streamline manual compliance workflows.
• US Personhood required.

Nice to Have

• CISSP, CISM, CISA, or other information security certifications.
• Experience with DoD Impact Level authorizations and CMMC certification.

Compensation Range: $152K - $218.5K