5+ years of experience in risk management, compliance, or GRC in a regulated environment.
Familiarity with NIST SP 800-53 controls and the FedRAMP authorization process.
Proven experience with SSPs, POA&Ms, and incident response plans.
Ability to create and maintain audit-ready governance documents.
Experience coordinating with 3PAOs and auditors during assessments.
Strong stakeholder influence skills across various departments.
Organizational skills to manage multiple audit timelines effectively.
Experience using AI to enhance compliance workflows.
Responsibilities
Own and maintain FedRAMP authorization artifacts, ensuring annual updates.
Manage the lifecycle of Plans of Action and Milestones (POA&M) with clear ownership.
Coordinate annual 3PAO assessments and act as the liaison with federal stakeholders.
Advise teams on cloud configurations to meet federal mandates.
Perform gap analyses for evolving public sector requirements and define remediation roadmaps.
Respond to inquiries about Snowflake's public sector compliance and create self-service resources.
Benefits
Opportunity to work in a fast-growing company with a focus on innovation.
Collaborative environment that encourages challenging ordinary thinking.
Potential for career growth and development within the organization.
Full Job Description
We are hiring a Senior Compliance Analyst, Snowgov Compliance for our SnowTrust GRC team. You will champion key public sector compliance initiatives, safeguard Snowflake's US public sector certifications, and align IT, Legal, Product, Security, and Engineering around the work that powers Snowflake's growth in government markets.
AS A SENIOR COMPLIANCE ANALYST, SNOWGOV COMPLIANCE AT SNOWFLAKE, YOU WILL:
Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually.
Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and remediation commitments through closure with clear ownership and realistic deadlines.
Coordinate annual 3PAO assessments and continuous monitoring, acting as the primary liaison between Snowflake, assessors, and federal agency stakeholders.
Advise Engineering and Operations teams so cloud configurations (FIPS 140-3 validation, boundary protection, access control, logging and monitoring) meet federal and DoD mandates.
Perform gap analyses for new or evolving public sector requirements, such as emerging CMMC or GovRAMP mandates and FedRAMP Consolidated Rules, and define technical remediation roadmaps.
Respond to customer and regulator inquiries about Snowflake's public sector security and compliance obligations, and build self-service resources so customers and field teams can increasingly answer these questions themselves.
OUR IDEAL SENIOR COMPLIANCE ANALYST, SNOWGOV COMPLIANCE WILL HAVE:
5+ years of experience in risk management, compliance, GRC, or a related governance function within a regulated or public sector environment preferred.
Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process.
Experience contributing to SSPs, POA&Ms, contingency plans (ISCP), and incident response plans (IRP).
Experience writing and maintaining audit-ready governance artifacts, including policies, standards, procedures, and control narratives.
Experience coordinating with 3PAOs, auditors, or assessors during annual assessments or continuous monitoring cycles.
Ability to influence stakeholders across Engineering, IT, Legal, and Security to drive control implementation and remediation without direct authority.
Strong organizational skills, with the ability to manage multiple concurrent audit and assessment timelines and track findings through closure.
Experience using AI to automate or streamline manual compliance workflows.
BONUS POINTS FOR THE FOLLOWING:
CISSP, CISM, CISA, or other information security certifications
Experience with DoD Impact Level authorizations and CMMC certification
Snowflake is growing fast, and we're scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.
How do you want to make your impact?
For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com
About Snowflake Computing
Snowflake is a cloud-based data-warehousing company that was founded in 2012. The company provides a data platform that allows customers to store and analyze data using cloud-based infrastructure. Snowflake's platform is designed to be highly scalable and flexible, allowing customers to easily add or remove computing resources as needed. The company's customers include a wide range of businesses, from startups to Fortune 500 companies. Snowflake has received significant funding from investors and has been recognized as one of the fastest-growing companies in the United States.
