Senior Security Compliance Specialist

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.

At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.

Available Location - Canada; Remote

Job Title - Senior Security Compliance Specialist

Security Compliance is a critical business function at Cloudflare. Compliance certifications allow our customers to be confident in the security and privacy of our products, while also providing frameworks for well-tuned information security management systems and programs. These standards provide clarity to Cloudflare’s teams on how to incorporate security principles in the management of systems, the development of products, and the expansion of our business footprint.

This is an opportunity to join a world-class security organization within a billion-dollar business. You will join as a member focused on leading Cloudflare through the Canadian Centre for Cyber Security (CCCS) Cloud Service Provider (CSP) Information Technology (ITS) Assessment Process. This team is part of the Governance, Risk, and Compliance team and is part of the greater Security Team reporting to Cloudflare’s Chief Security Officer.

• Lead Cloudflare through the CCCS CSP ITS Assessment process

• Update and maintain CCCS requirements within Cloudflare’s Common Control Framework

• Work cross-functionally with Engineering, Legal, Product, and operational teams to drive security control implementation for the organization

• Improve the maturity of Cloudflare’s Security Compliance program

• Help guide our overall security policy and governance architecture

• Have input into the overall security compliance strategy

Examples of desirable skills, knowledge and experience

• 5+ years of experience working in Security Compliance

• Led the pursuit of, or maintained a CCCS Medium / PBMM certification

• Deep understanding of the CCCS CSP ITS assessment processes

• Deep understanding of CCCS requirements

• Familiarity with additional security standards and frameworks such as ISO 27000, SOC 2, PCI DSS, HITRUST, FedRAMP

• Ability to work cross-functionally with internal stakeholders and strong communications skills

• Ability to work closely with auditors and articulate