Senior Compliance Analyst (Snowgov Compliance)

Location: Hybrid in Menlo Park, California, or McLean, Virginia, United States

Salary: $152K–$218.5K annually

Company

Snowflake provides a cloud data platform and is expanding its AI-native capabilities for enterprise and public-sector customers.

What you will do

• Own and maintain FedRAMP authorization artifacts, including the System Security Plan, Contingency Plan, and Incident Response Plan.
• Manage POA&Ms by tracking findings, risks, remediation commitments, owners, and deadlines through closure.
• Coordinate annual 3PAO assessments and continuous monitoring with assessors and federal agency stakeholders.
• Advise Engineering and Operations on FIPS 140-3 validation, boundary protection, access control, logging, and monitoring requirements.
• Analyze emerging public-sector requirements such as CMMC, GovRAMP, and FedRAMP Consolidated Rules, defining technical remediation roadmaps.
• Answer customer and regulator questions and create self-service resources for public-sector security and compliance topics.

Requirements

• 5+ years of experience in risk management, compliance, GRC, or a related governance function in a regulated or public-sector environment.
• Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process.
• Experience contributing to SSPs, POA&Ms, contingency plans, incident response plans, and audit-ready governance documentation.
• Experience coordinating with 3PAOs, auditors, or assessors during assessments or continuous monitoring cycles.
• Ability to influence Engineering, IT, Legal, and Security stakeholders without direct authority and manage multiple concurrent compliance timelines.
• Experience using AI to automate or streamline manual compliance workflows.

Nice to have

• CISSP, CISM, CISA, or another information security certification.
• Experience with DoD Impact Level authorizations and CMMC certification.

Culture & Benefits

• Work in a fast-growing engineering organization focused on public-sector compliance and enterprise security.
• Collaborate across IT, Legal, Product, Security, Engineering, Operations, and federal stakeholders.
• Use an experimental, AI-native approach to simplify and accelerate compliance work.