--- title: 'Senior InfoSec GRC Analyst at Camunda' canonical: 'https://feeny.ai/job/senior-infosec-grc-analyst-camunda-remote-cwtgz2kd3p5c' type: 'job' last_seen: '2026-09-06' --- # Senior InfoSec GRC Analyst at Camunda - **Company:** Camunda - **Location:** Remote - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-09-02 - **Last confirmed live:** 2026-09-06 - **Apply:** https://jobs.ashbyhq.com/camunda/af47b87e-097b-4ec5-ae82-a6d3e76558fc ## Job description Camunda is the enterprise platform for agentic orchestration, enabling organizations to coordinate AI agents, people, and systems across complex, end-to-end business processes. With built-in governance, auditability, and human oversight, Camunda gives enterprises the control they need to move AI from pilots to production — safely and at scale. Trusted by over 700 organizations worldwide, including 9 of top 10 US banks, Camunda helps enterprises boost operational efficiency, accelerate time-to-value, and deliver better customer experiences. Fully remote and global, we are in the middle of something bigger: transforming into an AI-first organisation, built on our own platform. We use Agentic AI to automate, orchestrate intelligent processes, and elevate human contribution across every team. Named GP Bullhound’s Top 100 Next Unicorn list, https://www.gpbullhound.com/articles/top-100-next-unicorns-the-uk-france-and-germany-lead-with-the-most-promising-technology-companies-in-europe/ 2025 Great Place to Work certified. Visionary in 2025 Gartner® Magic Quadrant™ https://page.camunda.com/wp-2025-gartner-magic-quadrant-for-boat for Business Orchestration and Automation Technologies. ranked 3rd in Flexa's 2026 Most Flexible Companies https://flexa.careers/companies/camunda, We’re growing fast and looking for top talent to join our team. If you want meaningful work, visible impact and put something genuinely rare on your CV, keep reading. About the role: At Camunda, hundreds of enterprises trust us to orchestrate their most critical business processes, and that trust is something we earn every single day. As our Senior InfoSec GRC Analyst, you will join a small, senior, and highly collaborative InfoSec team that lives our FAITH values (Focus, Ambition, Integrity, Talent and Humor) in everyday work. You will own the governance, risk, and compliance side of our security practice: keeping our ISMS healthy, driving our ISO 27001 and SOC 2 audit cycles, reviewing the security requirements our customers put in front of us, and replacing manual compliance work with automation wherever we can. It is a role with real ownership and plenty of cross functional contact, from Legal and Procurement to IT and our PreSales and PostSales teams, and your work will show up directly in how confidently customers adopt Camunda. What You’ll Be Doing: - Own and continuously improve Camunda's Information Security Management System (ISMS), spotting gaps, closing them, and making measurable improvements rather than just keeping documents current. - Drive our security audit cycle for ISO 27001, SOC 2, and future frameworks with minimal supervision, working directly with external auditors and internal control owners to keep evidence, findings, and timelines on track. - Review the information security requirements in customer contracts, redline what we cannot realistically meet, and give our negotiators clear, practical recommendations they can act on. - Lead responses to complex customer security questionnaires and act as a trusted point of contact for InfoSec topics coming from PreSales, PostSales, and customer security teams. - Run and improve our GRC tooling, adding automation and continuous monitoring so compliance evidence is collected once and reused, not rebuilt every audit season. - Take ownership of emerging InfoSec compliance topics such as the Cyber Resilience Act and the AI Act: perform gap analysis, translate requirements into concrete work, and partner with Legal, IT, Procurement, and Engineering to get them implemented. What You Bring: - Hands on experience implementing and maintaining ISO 27001 and/or SOC 2 certifications, including managing external audits from evidence gathering through to closing findings. - Substantial experience across information security, risk management, and compliance, with a clear focus on Governance, Risk, and Compliance (GRC), ideally gained in a SaaS or cloud software company. - Practical experience reviewing information security requirements in customer contracts and leading responses to security questionnaires, with the judgement to tell a real risk apart from a negotiable clause. - Experience working with GRC tools, compliance automation, and continuous monitoring, and a genuine preference for automating repetitive work instead of absorbing it. - Strong project management and collaboration skills, so you can move several workstreams forward at once across InfoSec, Legal and Compliance, IT, Procurement, and the field teams, and explain security topics clearly to technical and non technical colleagues alike. - Ability and/or willingness to use our product https://accounts.cloud.camunda.io/signup?_ga=2.47330343.127558761.1654184528-504024057.1654184528 Nice-to-haves: - Some software development or scripting ability, including comfort building small tools or automations with AI assisted coding. - Experience planning and running business continuity or disaster recovery testing. - Familiarity with newer regulatory frameworks such as the Cyber Resilience Act, the AI Act, or NIS2. - Experience working in a fully remote, async first organisation. This role is an existing vacancy #LI-SG1 #LI-Remote #C1 What We Have to Offer: ## Compensation We offer competitive, fair, and transparent compensation. Salary ranges are location-based, with Standard and Major markets (global tech hubs) reflecting local competition. The Annual Total Target Cash (base salary + 100% variable target, where applicable) shown below spans from the minimum in a Standard market to the maximum in a Major market. Final offers depend on skills, experience, and location, and we typically hire in the first half of the range to allow room for growth: - United States: $127,200.00 to $205,100.00 - United Kingdom: £79,900.00 to £131,400.00 - Singapore: S$158,000.00 to S$237,000.00 If you’re based elsewhere, you’ll be hired via Remote.com http://Remote.com (our global employer partner), and your Talent Acquisition Partner will provide a personalized Total Rewards Calculator after your first interview. Equity: We also offer equity (where applicable) through our Virtual Stock Option Plan (VSOP) https://docs.google.com/document/d/1hoyQAPTZ5nV7J47D9n3yqK5hhLj160Xf36iyqEXNOWE/edit?tab=t.0#heading=h.2qon7r4kdfe1. ## Benefits & Perks We invest in your wellbeing, growth, and ability to connect, along with perks that support you no matter where you’re based. Our benefits are globally designed and locally delivered where applicable. - Remote & Flexible: Work from anywhere with the setup that suits you, home office budget, co-working space support, and flexible time off to recharge when you need it. - In Person Connection: We invest in meaningful face time through our Annual Kickoff (Vienna in 2025, Madrid in 2026!), team offsites, and Camundi Connection Budgets, including contributing to meetups while travelling,, and local gatherings with fellow Camundi. - Health & Wellbeing: Access locally tailored healthcare, Modern Health for global mental wellbeing, and our Live Well Lifestyle Spending Account (LSA), a flexible, global benefit that puts you in control of your whole life, not just work, from: staying active, to caring for family, exploring personal passions, meaningful experiences, and investing in your financial wellbeing. The Live Well program launches in 2026 and scales to €1,000 annually from 2027. - Financial Security: Retirement and pension plans (often with company contributions), plus life and disability insurance where relevant. - Professional Growth: Up to $/€/£1,000 per year for self-driven learning: courses, certifications, books, you decide! AI in our hiring process: Camunda may use AI tools to aid the screening of applications and during the interview process. You can learn more here https://camunda.com/ai-in-our-interviewing-process/ ”Everyone is welcome at Camunda” — it’s a celebrated component of our culture. We strive to create an inclusive environment that empowers our people. At Camunda, we honour diverse cultures and backgrounds and are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to gender, race, ethnicity, religion, belief, sexual orientation, age, disability or any other protected characteristics under applicable law. We are looking forward to your application! Come join us and be part of Camunda’s incredible journey: Make an impact at a pivotal moment in our story! Please be aware that scammers may impersonate Camunda by reaching out about job opportunities. Camunda will only contact candidates from an email address ending in @camunda.com http://camunda.com. We will never ask candidates for bank account details, checks, payment, or other sensitive financial information as part of our hiring process. If you receive a suspicious message, please do not respond, click any links, or share personal information. Note for recruiting and placement agencies: Camunda does not accept unsolicited agency resumes. Please do not forward resumes to our careers site, employees, or any other Camunda contact unless we have specifically engaged your firm for that search. Camunda will not pay fees related to unsolicited resumes. ## About Camunda ## Company Overview - **One-liner**: Camunda provides an open platform for orchestrating AI agents, people, and systems across end-to-end business processes with built-in governance and auditability. - **Entity Type**: Private (no recent funding rounds publicly disclosed in provided materials) - **Headquarters**: Berlin, Germany - **Founded**: 2008 - **Founders**: Jakob Freund and Bernd Ruecker ## Core Business - Primary industry: Enterprise process automation and orchestration (BPM, workflow, now agentic orchestration) - Target customers: Large enterprises in financial services, insurance, telecom, retail, manufacturing, tech, and the public sector (B2B, enterprise) - Mission or purpose: Enable organizations to design, orchestrate and improve processes — no matter where they are and what they entail — and to move AI from pilots to production with full governance and control. ## Products & Services - **[Camunda Platform 8 (SaaS / Self-Managed)]**: Cloud-native process orchestration platform built on open standards (BPMN, DMN, Zeebe). Supports workflow automation, decision automation, and now agentic orchestration. - **[Agentic Orchestration Platform]**: Newest offering that orchestrates autonomous AI agents alongside human tasks and system integrations, with enforceable guardrails, policies, and escalation paths — providing full runtime traceability and audit logs. ## Market Standing - **Valuation/Market Cap**: Not publicly available - **Key Metric**: Annual Revenue not disclosed; over 750 enterprises use the platform (including 9 of the top 10 global banks). - **Notable Investors/Partners**: Not specified in provided materials (no funding or investor data within available search results) - **Growth Signals**: 600+ employees across 30+ countries; fully remote-first; 100,000+ developer community; proven outcomes (93% reduction in cycle time, 30x faster time-to-market, 12x ROI reported by some customers); expanding into agentic orchestration as a new category. ## Competitive Advantages - **Open Standards Foundation**: Deeply rooted in BPMN (Business Process Model and Notation) — an industry standard — making processes portable and resistant to vendor lock-in. - **Open Source Core**: Vibrant open-source community (100k+ developers) drives innovation and adoption. - **Governance & Auditability**: Unlike most AI agent platforms, Camunda builds compliance, approvals, and escalation paths directly into the process layer — crucial for regulated industries (e.g., banking, insurance). - **Hybrid Autonomy**: Ability to dial agent autonomy up or down per step, blending straight-through processing with human judgment. ## Strategic Focus - **Agentic Orchestration**: Leading the shift from task-level automation to end-to-end orchestration of AI agents, people, and systems. Emphasis on governance, control, and observability. - **Enterprise Adoption**: Targeting the "handoff" where most AI projects fail — enforcing decisions and tracking outcomes across complex business processes. - **Open Ecosystem**: Remaining platform-agnostic and standards-based to enable integration with any LLM, RPA bot, or legacy system. ## Why Work Here - **Fully Remote**: 100% remote-first organization with employees in 80+ hiring countries. Most roles have no location requirement. - **Culture & Values**: Strong emphasis on FAITH values (Focus, Ambition, Integrity, Talent, Humor?). Described as "fiercely ambitious" with a culture of ownership and transparency. - **Benefits**: Home office budget, annual company kickoffs, healthcare, retirement plans, life/disability insurance, up to $1,000/year for self-directed learning, unlimited LinkedIn Learning, fitness benefits, mental health programs, flexible time off. - **Engineering Culture**: Deep technical challenges at the intersection of process automation, distributed systems, and AI — ideal for engineers who enjoy building high-scale, reliable infrastructure. The company runs its own internal workflows on its product ("we eat our own dog food"). - **Growth & Impact**: As a category-defining company in agentic orchestration, employees have the chance to shape a new market while solving hard problems for the world’s largest banks and enterprises. ## Sources 1. [Camunda Homepage](https://camunda.com/) 2. [About Camunda](https://camunda.com/about/) 3. [Careers Page](https://camunda.com/careers/) 4. [Life at Camunda / FAQ](https://camunda.com/wb-life-at-camunda/) 5. [Open Positions](https://camunda.com/careers/all-jobs/) ## Other roles at Camunda - [Senior GTM Systems AI and Automation Engineer](https://feeny.ai/job/senior-gtm-systems-ai-and-automation-engineer-camunda-remote-cpmb344k6zdq) - [Engineering Manager - Infrastructure](https://feeny.ai/job/engineering-manager-infrastructure-camunda-remote-2r632hw7z6ws) - [Software Engineer, Backend - Core/API & Process Automation](https://feeny.ai/job/software-engineer-backend-core-api-process-automation-camunda-remote-2873efa5q4p5) - [Principal Product Manager- Time to First Production](https://feeny.ai/job/principal-product-manager-time-to-first-production-camunda-remote-30r30vx61m92) - [Software Engineer, Backend - Data Layer](https://feeny.ai/job/software-engineer-backend-data-layer-camunda-remote-qh3qdh9n6q7g) - [Senior Sales Engineer - UAE](https://feeny.ai/job/senior-sales-engineer-uae-camunda-united-arab-emirates-ajnhx1sx3j8n) — United Arab Emirates - [Senior Manager, QA Engineering](https://feeny.ai/job/senior-manager-qa-engineering-camunda-remote-aejgdtj91kd8) - [Senior Sales Engineer - UK](https://feeny.ai/job/senior-sales-engineer-uk-camunda-united-kingdom-x9qbn9ye9c02) — United Kingdom - [Senior Software Engineer, Backend - Distributed Systems](https://feeny.ai/job/senior-software-engineer-backend-distributed-systems-camunda-remote-d4mfc6y73k8p) - [Enterprise Account Executive UKI](https://feeny.ai/job/enterprise-account-executive-uki-camunda-united-kingdom-7bnxeagsmvjd) — United Kingdom