Senior Security Compliance Specialist
RemoteCanada
Job Summary
Lead Cloudflare through the CCCS CSP ITS Assessment process while updating and maintaining CCCS requirements within the Common Control Framework. Work cross-functionally with Engineering, Legal, Product, and operational teams to drive security control implementation and improve the maturity of the Security Compliance program. Guide overall security policy and governance architecture, providing input into the compliance strategy and articulating technical concepts to auditors. Travel occasionally to engage with regulators and auditors. This role supports the Governance, Risk, and Compliance team within the Security Team reporting to the Chief Security Officer, ensuring customers maintain confidence in the security and privacy of Cloudflare's products.
Required Qualifications
- 5+ years of experience working in Security Compliance
- Led the pursuit of, or maintained a CCCS Medium / PBMM certification
- Deep understanding of the CCCS CSP ITS assessment processes
- Deep understanding of CCCS requirements
- Familiarity with additional security standards and frameworks such as ISO 27000, SOC 2, PCI DSS, HITRUST, FedRAMP
- Ability to work cross-functionally with internal stakeholders and strong communications skills
- Ability to work closely with auditors and articulate technical concepts
- Ability to work efficiently and independently in a fast-paced, high-volume environment
- Willingness to travel occasionally to engage with regulators and auditors
Desired Qualifications
- AI-native curiosity to create a solution using the latest tools
- Values curiosity over bureaucracy
- Sees the cracks in the Internet that everyone else has simply learned to live with
- Instinct to spot a 'normalized' problem
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.