C

Cloudflare

Secures websites and runs apps on its network

Customer Security Compliance Specialist

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • Five to ten years of experience in security compliance, governance, risk, and compliance (GRC), technical audit management, IT risk consulting, or customer-facing security assurance is desirable.
  • Hands-on experience experimenting with, building, or configuring AI workflows, such as prompt engineering, retrieval-augmented generation concepts, API-based automations, or internal agent configurations, is desirable.
  • Solid understanding of security risk and compliance frameworks such as PCI DSS, ISO 27001, SOC 2, and NIST SP 800-53 is desirable.
  • Ability to translate complex networking, infrastructure, and cryptographic concepts into clear, plain-language customer responses and white papers is desirable.
  • Comfort presenting to or answering questions from external customers, sales executives, and legal counsel is desirable.
  • Familiarity with data structures, Markdown, APIs, or basic scripting such as Python, SQL, or shell is desirable.
  • Practical cloud or network engineering experience, deep familiarity with global privacy regulations such as GDPR and CCPA, or experience establishing automated operational metrics is a bonus.

Responsibilities

  • Take ownership of completing complex customer security questionnaires, requests for proposals, and technical assessments, orchestrating internal AI generation pipelines to draft responses and validating them for accuracy.
  • Engage directly with enterprise customers as a security advisor, meeting with customer security teams to resolve architectural inquiries, answer security questions, and assist legal teams with security terms in contract negotiations.
  • Host, coordinate, and facilitate on-site and virtual customer audits, guiding customers through security controls, processes, and compliance evidence.
  • Design, configure, and iterate on custom workflows and compliance assistants using internal AI platforms to automate questionnaire triage and security evidence retrieval.
  • Structure, audit, and maintain authoritative knowledge repositories covering SOC 2, PCI DSS, ISO 27001, and global security regulations to ensure internal AI models retrieve verified, up-to-date compliance data.
  • Collaborate with marketing and engineering to mature the customer Trust Portal and self-service resources so prospects and enterprise customers can evaluate Cloudflare’s security posture independently.
  • Research, write, and maintain public-facing white papers, security blogs, and compliance mappings aligned with Cloudflare’s evolving product suite and global regulatory changes.

Desired Qualifications

  • Five to ten years of experience in security compliance, GRC, technical audit management, IT risk consulting, or customer-facing security assurance.
  • Hands-on experience experimenting with, building on, or configuring AI workflows, including prompt engineering, retrieval-augmented generation concepts, API-based automations, or internal agent configurations.
  • Solid understanding of security risk and compliance frameworks such as PCI DSS, ISO 27001, SOC 2, and NIST SP 800-53.
  • Ability to translate complex networking, infrastructure, and cryptographic concepts into clear, plain-language customer responses and white papers.
  • Comfort presenting to or answering questions from external customers, sales executives, and legal counsel.
  • Familiarity with data structures, Markdown, APIs, or basic scripting such as Python, SQL, or shell.
  • Practical cloud or network engineering experience, deep familiarity with global privacy regulations such as GDPR and CCPA, or experience establishing automated operational metrics.

About the Company

Cloudflare

Secures websites and runs apps on its network

Cloudflare operates a network that protects websites, delivers online content and runs applications closer to their users. Businesses connect websites and internal systems to its services to filter malicious traffic, control access and improve performance, with security and computing running on shared infrastructure. Developers combine application code, object storage and databases with the network used for content delivery and traffic protection. Cloudflare earns revenue from subscriptions and usage charges, with free plans for basic features and negotiated contracts for larger organizations. Cloudflare was founded in 2009 and is headquartered in San Francisco, California.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2009

Recently Posted Jobs

Explore more opportunities at Cloudflare

See more jobs