Senior Compliance Analyst, Snowgov Compliance

Snowflake; Bellevue (WA); On-site; USD 152,000 - 219,000; Full time

Job summary

Snowflake is hiring a Senior Compliance Analyst for Snowgov Compliance to safeguard public sector certifications and align cross-functional teams. You will lead FedRAMP artifacts, manage POA&M, and coordinate 3PAO assessments to ensure regulatory alignment.

The role requires 5+ years in risk/compliance, strong NIST 800-53 and FedRAMP experience, and the ability to influence across Engineering, IT, Legal, and Security.

Qualifications

• 5+ years experience in risk management, compliance, GRC in regulated or public sector.
• Knowledge of NIST SP 800-53 controls and FedRAMP processes.
• Experience writing SSPs, POA&Ms, ISCP, IRP.
• Audit-ready governance artifacts: policies, standards, procedures, control narratives.
• Coordinate with 3PAOs, auditors or assessors during assessments.
• Influence stakeholders across Engineering, IT, Legal, and Security.
• Able to manage multiple audit timelines and track findings to closure.
• Experience using AI to automate compliance workflows.
• US Personhood required for data/governance work.

Responsibilities

• Own FedRAMP artifacts (SSP, ISCP, IRP) and update annually.
• Manage POA&M lifecycle with findings and remediation timelines.
• Coordinate annual 3PAO assessments and monitoring.
• Advise Engineering/Operations to meet DoD and federal mandates.
• Perform gap analyses for new public sector requirements and define remediation roadmaps.
• Respond to inquiries and build self-service resources for customers and teams.

Skills

Risk management

Compliance

GRC

Governance

NIST SP 800-53

FedRAMP

3PAOs coordination

Audit readiness

AI for compliance

US personhood

Job description

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don't just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset - who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

We are hiring a Senior Compliance Analyst, Snowgov Compliance for our SnowTrust GRC team. You will champion key public sector compliance initiatives, safeguard Snowflake's US public sector certifications, and align IT, Legal, Product, Security, and Engineering around the work that powers Snowflake's growth in government markets.

AS A SENIOR COMPLIANCE ANALYST, SNOWGOV COMPLIANCE AT SNOWFLAKE, YOU WILL:

• Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually.
• Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and remediation commitments through closure with clear ownership and realistic deadlines.
• Coordinate annual 3PAO assessments and continuous monitoring, acting as the primary liaison between Snowflake, assessors, and federal agency stakeholders.
• Advise Engineering and Operations teams so cloud configurations (FIPS 140-3 validation, boundary protection, access control, logging and monitoring) meet federal and DoD mandates.
• Perform gap analyses for new or evolving public sector requirements, such as emerging CMMC or GovRAMP mandates and FedRAMP Consolidated Rules, and define technical remediation roadmaps.
• Respond to customer and regulator inquiries about Snowflake's public sector security and compliance obligations, and build self-service resources so customers and field teams can increasingly answer these questions themselves.

OUR IDEAL SENIOR COMPLIANCE ANALYST, SNOWGOV COMPLIANCE WILL HAVE:

• 5+ years of experience in risk management, compliance, GRC, or a related governance function within a regulated or public sector environment preferred.
• Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process.
• Experience contributing to SSPs, POA&Ms, contingency plans (ISCP), and incident response plans (IRP).
• Experience writing and maintaining audit-ready governance artifacts, including policies, standards, procedures, and control narratives.
• Experience coordinating with 3PAOs, auditors, or assessors during annual assessments or continuous monitoring cycles.
• Ability to influence stakeholders across Engineering, IT, Legal, and Security to drive control implementation and remediation without direct authority.
• Strong organizational skills, with the ability to manage multiple concurrent audit and assessment timelines and track findings through closure.
• Experience using AI to automate or streamline manual compliance workflows.
• US Personhood required (due to nature of covered federal data and government authorization work)

BONUS POINTS FOR THE FOLLOWING:

• CISSP, CISM, CISA, or other information security certifications
• Experience with DoD Impact Level authorizations and CMMC certification

Snowflake is growing fast, and we're scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?

For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com

The following represents the expected range of compensation for this role:

• The estimated base salary range for this role is $152,000 - $218,500.
• Additionally, this role is eligible to participate in Snowflake's bonus and equity plan.

The successful candidate's starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.

To comply with pay transparency requirements and other statutes, you can notify us if you believe that a job posting is not compliant by completing this form.