Senior InfoSec GRC Analyst

Camunda·RemoteRemotosenior

En corto

→Analista senior de GRC de seguridad informática que gestiona auditorías ISO 27001 y SOC 2, y garantiza cumplimiento con clientes.
→Trabajas con múltiples áreas (legal, ventas, TI) y usas automatización para mantener evidencia de cumplimiento en tiempo real.
→Destacado: Tienes voz en el cumplimiento de regulaciones emergentes como el Cyber Resilience Act y la AI Act.

Proficiency in English is required for collaboration across global teams.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓Experiencia comprobada en ISO 27001 y/o SOC 2, incluyendo auditorías externas.
✓Conocimiento práctico en gestión de riesgos y cumplimiento en empresas SaaS/cloud.
✓Habilidad para analizar requisitos de seguridad en contratos y responder cuestionarios de clientes.
✓Experiencia con herramientas GRC y automatización de cumplimiento.
✓Capacidad para traducir normativas emergentes en acciones concretas.
✓Trabajo colaborativo con legal, ventas, ingeniería y operaciones.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

ISO 27001SOC 2GRC toolingCompliance automationContinuous monitoringCustomer security questionnairContract security reviewsAudit evidence managementCyber Resilience ActAI Act

¿A quién escribirle en Camunda?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

Register Here! Camunda is the enterprise platform for agentic orchestration , enabling organizations to coordinate AI agents, people, and systems across complex, end-to-end business processes. With built-in governance, auditability, and human oversight, Camunda gives enterprises the control they need to move AI from pilots to production — safely and at scale. Trusted by over 700 organizations worldwide , including 9 of top 10 US banks, Camunda helps enterprises boost operational efficiency, accelerate time-to-value, and deliver better customer experiences. Fully remote and global, we are in the middle of something bigger: transforming into an AI-first organisation, built on our own platform . We use Agentic AI to automate, orchestrate intelligent processes, and elevate human contribution across every team. Named GP Bullhound’s Top 100 Next Unicorn list, 2025 Great Place to Work certified. Technologies. ranked 3rd in Flexa's 2026 Most Flexible Companies , We’re growing fast and looking for top talent to join our team. If you want meaningful work, visible impact and put something genuinely rare on your CV, keep reading. About the role: At Camunda, hundreds of enterprises trust us to orchestrate their most critical business processes, and that trust is something we earn every single day. As our Senior InfoSec GRC Analyst, you will join a small, senior, and highly collaborative InfoSec team that lives our FAITH values (Focus, Ambition, Integrity, Talent and Humor) in everyday work. You will own the governance, risk, and compliance side of our security practice: keeping our ISMS healthy, driving our ISO 27001 and SOC 2 audit cycles, reviewing the security requirements our customers put in front of us, and replacing manual compliance work with automation wherever we can. It is a role with real ownership and plenty of cross functional contact, from Legal and Procurement to IT and our PreSales and PostSales teams, and your work will show up directly in how confidently customers adopt Camunda. What You’ll Be Doing: Own and continuously improve Camunda's Information Security Management System (ISMS), spotting gaps, closing them, and making measurable improvements rather than just keeping documents current. Drive our security audit cycle for ISO 27001, SOC 2, and future frameworks with minimal supervision, working directly with external auditors and internal control owners to keep evidence, findings, and timelines on track. Review the information security requirements in customer contracts, redline what we cannot realistically meet, and give our negotiators clear, practical recommendations they can act on. Lead responses to complex customer security questionnaires and act as a trusted point of contact for InfoSec topics coming from PreSales, PostSales, and customer security teams. Run and improve our GRC tooling, adding automation and continuous monitoring so compliance evidence is collected once and reused, not rebuilt every audit season. Take ownership of emerging InfoSec compliance topics such as the Cyber Resilience Act and the AI Act: perform gap analysis, translate requirements into concrete work, and partner with Legal, IT, Procurement, and Engineering to get them implemented. What You Bring: Hands on experience implementing and maintaining ISO 27001 and/or SOC 2 certifications, including managing external audits from evidence gathering through to closing findings. Substantial experience across information security, risk management, and compliance, with a clear focus on Governance, Risk, and Compliance (GRC), ideally gained in a SaaS or cloud software company. Practical experience reviewing information security requirements in customer contracts and leading responses to security questionnaires, with the judgement to tell a real risk apart from a negotiable clause.

¿Buscando algo parecido?

Dejá tu email y te avisamos cuando salgan vacantes que coincidan con tu perfil.

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.