• Planning, procurement, installation, daily on-site maintenance, upgrades, replacements, and preventive maintenance on all systems in addition to annual IDS testing. • Inventory capture of all electronic security equipment and updating as equipment is added, upgraded, or removed. • Providing technical assistance to other team members as well as acting as the technical expert to the customer to solve problems or provide general guidance. • Electrical troubleshooting, device testing, installation of electronic components, surveillance camera installation and experience with software monitoring systems. • Follow or refer to layout sheets, building plans, floor plans, circuit schematics and descriptions, and manufacturer’s technical guidance. • Documenting, scheduling, and closing work orders with detailed description of work completed. • Occasional overtime required. • Work orders will be created based on customer requests via email, phone, or text. Work orders and annual testing reports will be completed and then sent to the customer and PM weekly. All documentation shall be provided to the PM for each month’s activity by the 1st of the following month. Expense reports will be completed on a weekly basis as needed. • Performs other job-related duties as assigned.

• Own the design, buildout, and priorities of Qventus' cloud and data security engineering • Collaborate with teams to automate security guardrails, not gates • Know where our sensitive data lives and develop controls for validating secure access • Partner with engineering teams so security is understood and owned, not imposed

• Own security in our AWS environment: IAM and least privilege, network segmentation, encryption, logging and detection (GuardDuty, Security Hub, CloudTrail), fixing what you find. • Build security into the development pipeline: secrets management, dependency and container scanning, code review for risky changes, threat modeling with the engineers. • Automate. Detection rules, alerting, compliance evidence, IaC guardrails. If a control can be code instead of a meeting, make it code. • Run vulnerability management and incident response. • Write the runbooks, run the drills. • Set the rules for our AI and LLM use: which data goes to which vendors, which models are approved, how prompts and outputs are handled and logged. • Assess risks like prompt injection and data leakage, design controls that let people keep working. • Own SOC 2: control design, automated evidence collection, the auditor relationship. • Handle regulatory side for our financial-institution customers: GDPR and CCPA for privacy, DORA and EBA outsourcing guidelines in the EU, GLBA and SEC/FINRA expectations in the US. • Lead customer security reviews: due diligence questionnaires, RFPs, contract security terms, calls with bank security teams. • Run vendor reviews and third-party risk. • Secure the human half by building awareness training, phishing resilience, and device and identity hygiene that work for deals and sales people, not only engineers. • Over time: set the security strategy, report risk to leadership in business terms, choose tooling, build a budget, hire.

Role Description As a Senior Security Compliance Specialist at Cloudflare, you will: - Lead Cloudflare through the CCCS CSP ITS Assessment process - Update and maintain CCCS requirements within Cloudflare’s Common Control Framework - Work cross-functionally with Engineering, Legal, Product, and operational teams to drive security control implementation for the organization - Improve the maturity of Cloudflare’s Security Compliance program - Help guide our overall security policy and governance architecture - Have input into the overall security compliance strategy Qualifications - 5+ years of experience working in Security Compliance - Led the pursuit of, or maintained a CCCS Medium / PBMM certification - Deep understanding of the CCCS CSP ITS assessment processes - Deep understanding of CCCS requirements - Familiarity with additional security standards and frameworks such as ISO 27000, SOC 2, PCI DSS, HITRUST, FedRAMP - Ability to work cross-functionally with internal stakeholders and strong communications skills - Ability to work closely with auditors and articulate technical concepts - Ability to work efficiently and independently in a fast-paced, high-volume environment - Willingness to travel occasionally to engage with regulators and auditors Benefits - Opportunity to join a world-class security organization within a billion-dollar business - Engagement in meaningful projects that protect the free and open Internet Company Description At Cloudflare, we are on a mission to help build a better Internet. We protect and accelerate any Internet application online without adding hardware, installing software, or changing a line of code. - Project Galileo: Equipping journalism and civil society organizations with tools to defend against attacks since 2014. - Athenian Project: Providing state and local governments with protection and reliability for election information since 2017. - 1.1.1.1: A public DNS resolver focused on speed, security, and privacy.