Senior Security Compliance Specialist - Cloudflare

About Cloudflare

Cloudflare is on a mission to help build a better Internet. We power one of the world’s largest networks, protecting and accelerating millions of Internet properties. We value builders who spot "normalized" problems and use AI-native curiosity to create solutions.

The Role

As a Senior Security Compliance Specialist, you will join our Governance, Risk, and Compliance team. You will lead Cloudflare through the Canadian Centre for Cyber Security (CCCS) Cloud Service Provider (CSP) Information Technology (ITS) Assessment Process, ensuring our products meet the highest security and privacy standards.

What You’ll Do

• Lead Cloudflare through the CCCS CSP ITS Assessment process.
• Update and maintain CCCS requirements within Cloudflare’s Common Control Framework.
• Collaborate cross-functionally with Engineering, Legal, Product, and operational teams to drive security control implementation.
• Improve the maturity of Cloudflare’s Security Compliance program.
• Guide overall security policy, governance architecture, and compliance strategy.

Desirable Skills & Experience

• 5+ years of experience in Security Compliance.
• Proven track record leading the pursuit of, or maintaining, a CCCS Medium / PBMM certification.
• Deep understanding of CCCS CSP ITS assessment processes and requirements.
• Familiarity with standards such as ISO 27000, SOC 2, PCI DSS, HITRUST, and FedRAMP.
• Strong communication skills with the ability to work closely with auditors and articulate technical concepts.
• Ability to work efficiently and independently in a fast-paced environment.
• Willingness to travel occasionally for regulatory and auditor engagements.

Compensation & Benefits

• Salary: CAD $109,000 - $150,000 annually.
• Equity: This role is eligible to participate in Cloudflare's equity plan.

Note: Applicants progressing to the offer stage may be asked to attend an in-person interview at a Cloudflare office or hub. This position may require authorization to access technology controlled under U.S. export laws.