Senior FedRAMP & Public Sector Compliance Lead

Snowflake; Bellevue (WA); On-site; USD 152,000 - 219,000; Full time

Job summary

Snowflake is hiring a Senior Compliance Analyst for Snowgov Compliance to safeguard public sector certifications and align cross-functional teams. You will lead FedRAMP artifacts, manage POA&M, and coordinate 3PAO assessments to ensure regulatory alignment.

The role requires 5+ years in risk/compliance, strong NIST 800-53 and FedRAMP experience, and the ability to influence across Engineering, IT, Legal, and Security.

Qualifications

• 5+ years experience in risk management, compliance, GRC in regulated or public sector.
• Knowledge of NIST SP 800-53 controls and FedRAMP processes.
• Experience writing SSPs, POA&Ms, ISCP, IRP.
• Audit-ready governance artifacts: policies, standards, procedures, control narratives.
• Coordinate with 3PAOs, auditors or assessors during assessments.
• Influence stakeholders across Engineering, IT, Legal, and Security.
• Able to manage multiple audit timelines and track findings to closure.
• Experience using AI to automate compliance workflows.
• US Personhood required for data/governance work.

Responsibilities

• Own FedRAMP artifacts (SSP, ISCP, IRP) and update annually.
• Manage POA&M lifecycle with findings and remediation timelines.
• Coordinate annual 3PAO assessments and monitoring.
• Advise Engineering/Operations to meet DoD and federal mandates.
• Perform gap analyses for new public sector requirements and define remediation roadmaps.
• Respond to inquiries and build self-service resources for customers and teams.

Skills

Risk management

Compliance

GRC

Governance

NIST SP 800-53

FedRAMP

3PAOs coordination

Audit readiness

AI for compliance

US personhood

Job description

Snowflake is hiring a Senior Compliance Analyst for Snowgov Compliance to safeguard public sector certifications and align cross-functional teams. You will lead FedRAMP artifacts, manage POA&M, and coordinate 3PAO assessments to ensure regulatory alignment.

The role requires 5+ years in risk/compliance, strong NIST 800-53 and FedRAMP experience, and the ability to influence across Engineering, IT, Legal, and Security.