below marketmost similar roles pay hereabove market
This role pays less than
67%
of similar roles. Most pay
$142,400–$203,000
— the blue band above.
At the midpoint, this role pays about
$148k
versus about
$173k
for comparable roles.
Based on 240 similar postings.
Employer
About Cloudflare, Inc
Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.
Cloudflare, Inc currently has
110 open roles
on FindRole.
Listed pay typically runs
$194,000–$266,000
across 56 roles with salary data.
The Customer Security Compliance Specialist joins the Customer Compliance Team to build trust by communicating security programs and policies. You will serve as a subject matter expert on products and infrastructure, managing complex security questionnaires, RFPs, and technical assessments. Daily responsibilities include engaging enterprise customers on architectural inquiries, facilitating on-site and virtual audits, and authoring public security content like white papers. You will build and iterate on custom workflows using in-house AI platforms to automate compliance evidence retrieval and triage. Key requirements include experience with PCI DSS, ISO 27001, SOC 2, and NIST SP 800-53 frameworks. You must demonstrate the ability to build AI workflows using prompt engineering and RAG concepts, while utilizing Python, SQL, or shell scripting to prototype solutions and inspect model outputs.
Complete complex customer security questionnaires and RFPs using internal AI generation pipelines and human validation.
Act as a security advisor to enterprise customers to resolve architectural inquiries and contract negotiations.
Host and coordinate on-site and virtual customer audits to demonstrate security controls and compliance evidence.
Design and iterate on custom AI workflows to automate questionnaire triage and security evidence retrieval.
Maintain authoritative knowledge repositories for SOC 2, PCI DSS, ISO 27001, and other global regulations.
Author public-facing security content including white papers, blogs, and compliance mappings.
Update the customer Trust Portal and self-service resources to improve independent security evaluations.
What we're looking for
5–10 years of experience in security compliance, GRC, technical audit management, IT risk consulting, or customer-facing security assurance (preferred).
Demonstrated ability to build with AI, including prompt engineering, RAG concepts, or API-based automations (preferred).
Solid understanding of security risk and compliance frameworks such as PCI DSS, ISO 27001, SOC 2, and NIST SP 800-53 (preferred).
Strong written communication skills to translate complex networking, infrastructure, and cryptographic concepts into plain-language responses (preferred).
Highly comfortable and articulate when presenting to or answering questions from external customers, sales executives, and legal counsel (preferred).
Comfort partnering across Sales, Product, Legal, and internal Platform/AI Engineering teams to drive projects forward (preferred).
Familiarity with data structures, markdown, APIs, or basic scripting like Python, SQL, or shell (preferred).
Export control laws, including the U.S. Export Administration Regulations.
EMC
RF
Wireless
Cybersecurity
FCC Part 15
ICES-003
EN 55032
EN 61000
EN 301 489
RSS
Bluetooth SIG
IEC 62368-1
ISO 7637
ETSI EN 303 645
Electrical Engineering
Firmware Engineering