GRC Engineer: AI-Driven Security & Compliance

Cloudflare; Austin (TX); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity plan

Medical insurance

401(k) plan

Flexible PTO

Job summary

Cloudflare in Austin is seeking a seasoned Security Governance, Risk and Compliance (GRC) professional to design and implement automated controls across the organization. The role focuses on scaling GRC processes and integrating security into product development and operations.

You will lead AI governance, collaborate with Legal, People, Engineering and Finance, and support audits (SOC 2, ISO 27001, PCI DSS, FedRAMP) while maintaining a secure, compliant edge network for customers worldwide.

Qualifications

• 5+ years of experience in security, compliance, automation, or engineering in a fast-paced environment.
• Builder mindset: enjoy building technical solutions over manual checkboxes.
• Experience designing or implementing AI-powered automation and agentic workflows with an understanding of non-deterministic risks.
• Deep experience with Infrastructure-as-Code (Terraform, Pulumi) and Policy-as-Code (OPA/Rego).
• Proficient in Python, Go, or other scripting languages; comfortable with REST APIs and modern web apps (JavaScript/TypeScript, React).
• Curious, empathetic, and results-driven; collaborates across teams.

Responsibilities

• Develop and implement automated solutions to improve GRC processes, integrating with security, engineering, and AI tools.
• Architect and maintain a governance framework for autonomous AI agents within risk thresholds.
• Support audits (SOC 2, ISO 27001, PCI DSS, FedRAMP) and maintain automated drift detection and self-healing configurations.
• Collaborate with Legal, People, Engineering, and Finance to embed security into the product.

Skills

Python

Go

REST APIs

JavaScript/TypeScript

React

Automation

GRC

Tools

Terraform

Pulumi

OPA/Rego

Job description

Cloudflare in Austin is seeking a seasoned Security Governance, Risk and Compliance (GRC) professional to design and implement automated controls across the organization. The role focuses on scaling GRC processes and integrating security into product development and operations.

You will lead AI governance, collaborate with Legal, People, Engineering and Finance, and support audits (SOC 2, ISO 27001, PCI DSS, FedRAMP) while maintaining a secure, compliant edge network for customers worldwide.