Senior InfoSec GRC Analyst — Remote

Camunda; United States; Remote; USD 127,000 - 205,000; Full time

Benefits offered by this job

Remote work

Annual kickoff

Wellbeing programs

Learning budget

Job summary

Camunda is seeking a Senior InfoSec GRC Analyst to own governance, risk, and compliance across our security program. You will manage the ISMS, drive ISO 27001 and SOC 2 audits, and translate customer security requirements into practical actions with cross-functional teams.

In this remote role, you’ll partner with Legal, IT, Procurement, and Engineering to automate evidence gathering, close audit findings, and strengthen our security posture across SaaS and cloud environments.

Qualifications

• Hands-on experience implementing and maintaining ISO 27001 and SOC 2 certifications.
• Experience managing external audits from evidence gathering to closing findings.
• Experience with governance, risk and compliance (GRC) in SaaS/cloud environments.

Responsibilities

• Own and improve the Information Security Management System (ISMS) and close gaps.
• Drive ISO 27001, SOC 2 audits with auditors and control owners.
• Review customer security requirements and negotiate feasible terms.
• Lead responses to security questionnaires with cross-functional teams.
• Automate evidence collection and monitoring with GRC tooling.

Skills

ISO 27001

SOC 2

GRC

Audits

Contract reviews

Automation

Stakeholder collaboration

Cloud/SaaS

Tools

GRC tools

Job description

Camunda is seeking a Senior InfoSec GRC Analyst to own governance, risk, and compliance across our security program. You will manage the ISMS, drive ISO 27001 and SOC 2 audits, and translate customer security requirements into practical actions with cross-functional teams.

In this remote role, you’ll partner with Legal, IT, Procurement, and Engineering to automate evidence gathering, close audit findings, and strengthen our security posture across SaaS and cloud environments.