Snowflake
Senior Compliance Analyst, Snowgov Compliance
- Employment type
- Full-time
- Workplace type
- Hybrid
- Location
- US-CA-Menlo Park · US-VA-McLean
- Published
- Oct 7, 2026
- Last checked
- Oct 26, 2026
About this role
At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.
We are hiring a Senior Compliance Analyst, Snowgov Compliance for our SnowTrust GRC team. You will champion key public sector compliance initiatives, safeguard Snowflake's US public sector certifications, and align IT, Legal, Product, Security, and Engineering around the work that powers Snowflake's growth in government markets.
AS A SENIOR COMPLIANCE ANALYST, SNOWGOV COMPLIANCE AT SNOWFLAKE, YOU WILL:
- Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually.
- Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and remediation commitments through closure with clear ownership and realistic deadlines.
- Coordinate annual 3PAO assessments and continuous monitoring, acting as the primary liaison between Snowflake, assessors, and federal agency stakeholders.
- Advise Engineering and Operations teams so cloud configurations (FIPS 140-3 validation, boundary protection, access control, logging and monitoring) meet federal and DoD mandates.
- Perform gap analyses for new or evolving public sector requirements, such as emerging CMMC or GovRAMP mandates and FedRAMP Consolidated Rules, and define technical remediation roadmaps.