SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Snowflake is seeking a Senior Compliance Analyst to join the SnowTrust GRC team, focusing on public sector compliance and federal government market growth. This role owns and maintains critical FedRAMP authorization artifacts including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), ensuring they remain accurate and updated annually.
Key responsibilities include managing the lifecycle of Plans of Action and Milestones (POA&M), tracking findings and remediation commitments through closure with clear ownership. You will coordinate annual Third-Party Assessment Organization (3PAO) assessments and continuous monitoring, serving as the primary liaison between Snowflake, assessors, and federal agency stakeholders. The role requires advising Engineering and Operations teams to ensure cloud configurations—including FIPS 140-3 validation, boundary protection, access control, and logging/monitoring—meet federal and DoD mandates.
You will perform gap analyses for new or evolving public sector requirements such as CMMC and GovRAMP mandates, and define technical remediation roadmaps. Additionally, you will respond to customer and regulator inquiries about Snowflake's public sector security and compliance obligations, and build self-service resources to enable customers and field teams to independently answer compliance questions.
This is a high-impact role requiring cross-functional influence across Engineering, IT, Legal, and Security teams to drive control implementation and remediation without direct authority. You will manage multiple concurrent audit and assessment timelines while maintaining audit-ready governance artifacts.
REQUIREMENTS:
- 5+ years of experience in risk management, compliance, GRC, or related governance function within a regulated or public sector environment (preferred)
- Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process
- Experience contributing to SSPs, POA&Ms, contingency plans (ISCP), and incident response plans (IRP)
- Experience writing and maintaining audit-ready governance artifacts including policies, standards, procedures, and control narratives
- Experience coordinating with 3PAOs, auditors, or assessors during annual assessments or continuous monitoring cycles
- Ability to influence stakeholders across Engineering, IT, Legal, and Security to drive control implementation and remediation without direct authority
- Strong organizational skills to manage multiple concurrent audit and assessment timelines and track findings through closure
- Experience using AI to automate or streamline manual compliance workflows
BONUS:
- CISSP, CISM, CISA, or other information security certifications
- Experience with DoD Impact Level authorizations and CMMC certification
