Senior Compliance Analyst, Snowgov Compliance

📋 Description

• Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP)
• Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and
• Coordinate annual 3PAO assessments and continuous monitoring, acting as the primary liaison between
• Advise Engineering and Operations teams so cloud configurations (FIPS 140-3 validation, boundary
• Perform gap analyses for new or evolving public sector requirements, such as emerging CMMC or
• Respond to customer and regulator inquiries about Snowflake's public sector security and compliance

🎯 Requirements

• 5+ years of experience in risk management, compliance, GRC, or a related governance function within
• Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process.
• Experience contributing to SSPs, POA&Ms, contingency plans (ISCP), and incident response plans
• Experience writing and maintaining audit-ready governance artifacts, including policies, standards
• Experience coordinating with 3PAOs, auditors, or assessors during annual assessments or continuous
• Ability to influence stakeholders across Engineering, IT, Legal, and Security to drive control

🎁 Benefits

• CISSP, CISM, CISA, or other information security certifications
• Experience with DoD Impact Level authorizations and CMMC certification