Senior InfoSec GRC Analyst

Position:
Senior InfoSec GRC Analyst

Company:
Camunda

Compensation:
- United States: $127,200.00 to $205,100.00
- United Kingdom: £79,900.00 to £131,400.00
- Singapore: S$158,000.00 to S$237,000.00

Location:
Remote

Employment type:
Full time

Work Arrangement:
Remote

Short Summary:
At Camunda, you will join a collaborative InfoSec team as a Senior InfoSec GRC Analyst, focusing on governance, risk, and compliance within our security practice. You will drive ISO 27001 and SOC 2 audit cycles, review security requirements, and automate compliance processes.

Responsibilities:
- Own and improve Camunda's Information Security Management System (ISMS).
- Drive security audit cycles for ISO 27001, SOC 2, and future frameworks.
- Review information security requirements in customer contracts.
- Lead responses to complex customer security questionnaires.
- Run and improve GRC tooling with automation and continuous monitoring.
- Take ownership of emerging InfoSec compliance topics.

Requirement:
- Hands-on experience with ISO 27001 and/or SOC 2 certifications.
- Substantial experience in information security, risk management, and compliance.
- Practical experience reviewing information security requirements in contracts.
- Experience with GRC tools and compliance automation.
- Strong project management and collaboration skills.

Benefits:
- Remote & Flexible work setup.
- In-person connection opportunities through team offsites and gatherings.
- Access to tailored healthcare and mental wellbeing resources.
- Retirement and pension plans with company contributions.
- Professional growth budget for self-driven learning.