Senior InfoSec GRC Analyst

📋 Description Own and improve Camunda's ISMS and drive ISO 27001/SOC 2 audit cycles Review customer security requirements and provide practical negotiation guidance Lead responses to complex customer security questionnaires Automate GRC processes and implement continuous monitoring Address emerging compliance topics (Cyber Resilience Act, AI Act) with cross‑functional partners 🎯 Requirements Hands-on experience implementing and maintaining ISO 27001 and/or SOC 2 Strong GRC focus across information security, risk, and compliance Experience reviewing contracts and security questionnaires Experience with GRC tools, automation, and continuous monitoring Excellent project management and collaboration across multiple teams Willingness to use Camunda product tooling 🎁 Benefits Remote/flexible work and global benefits designed for distributed teams Annual kickoff events and team offsites Wellbeing, health, and financial security programs Learning budgets for courses and certifications Equity via VSOP where applicable AI in our hiring process and inclusive culture