Senior InfoSec GRC Analyst

📋 Description

• Own and improve Camunda's ISMS and drive ISO 27001/SOC 2 audit cycles
• Review customer security requirements and provide practical negotiation guidance
• Lead responses to complex customer security questionnaires
• Automate GRC processes and implement continuous monitoring
• Address emerging compliance topics (Cyber Resilience Act, AI Act) with cross‑functional partners

🎯 Requirements

• Hands-on experience implementing and maintaining ISO 27001 and/or SOC 2
• Strong GRC focus across information security, risk, and compliance
• Experience reviewing contracts and security questionnaires
• Experience with GRC tools, automation, and continuous monitoring
• Excellent project management and collaboration across multiple teams
• Willingness to use Camunda product tooling

🎁 Benefits

• Remote/flexible work and global benefits designed for distributed teams
• Annual kickoff events and team offsites
• Wellbeing, health, and financial security programs
• Learning budgets for courses and certifications
• Equity via VSOP where applicable
• AI in our hiring process and inclusive culture