Senior Legal Counsel - Compliance (EMEA Main Focus)

Join us for our upcoming webinar, How to Be a Leader, Not Just a Manager. A practical session with a powerhouse panel on leading modern, remote teams.

Register here!

Camunda is the leader in enterprise agentic automation, orchestrating complex business processes, including high-value knowledge work, across agents, people, and systems. By creating production-ready, enterprise-grade agents with built-in governance, Camunda uniquely delivers trusted AI agents for business-critical processes. Over 700 leading innovators like Atlassian, ING, and Vodafone, rely on Camunda to slash time-to-value from months to days, boost operational efficiency, and elevate customer experiences. Camunda was named a Visionary in the inaugural 2025 Gartner® Magic Quadrant™ for Business Orchestration and Automation Technologies (BOAT).

As a fully remote, global company, we’re rewriting the rules of modern business. Named GP Bullhound’s 2024 Top 100 Next Unicorn list, certified as a Great Place to Work, and recognized by Flexa for true flexibility, we’re growing fast and looking for top talent to join our team. If you’re excited to do meaningful work and make real impact, keep reading, this role could be the one you’ve been waiting for.

About the Role

As Senior Legal Counsel – Compliance, you will join our global L&C team and lead Camunda’s approach to core compliance topics, including international privacy and data protection, AI governance, ESG and sustainability reporting, export control, human rights, and supply‑chain due diligence. You’ll be the go‑to advisor and business partner for these areas, working closely with teams across the company and supporting customer and procurement contract negotiations. You will own and evolve our governance frameworks, policies, and ways of working, turning complex requirements into clear guidance that enables our remote‑first SaaS business to move quickly while staying compliant.

This role is an excellent fit if you thrive on end‑to‑end ownership and enjoy combining deep subject‑matter expertise with pragmatic advice and visible impact on our processes, product, and strategy.

What you'll be doing

• Serve as a trusted compliance partner to all teams across Camunda, providing clear and pragmatic guidance on topics such as privacy and data protection, AI governance, ESG and sustainability reporting, export/sanctions, and human‑rights checks in supply chain management.
• Act as a key privacy advisor to the Legal Go-to-Market (GTM) team, leading and supporting global negotiations on data protection and healthcare privacy matters, including Data Processing Agreements (DPAs), Business Associate Agreements (BAAs), HIPAA-related terms, and other privacy provisions within Master Services Agreements (MSAs).
• Coordinate and manage cross‑functional projects with high business impact that involve compliance considerations, such as privacy management tooling and processes (including DSR and ROPA automation and incident response). Design and deliver targeted training and awareness initiatives.
• Independently maintain and further develop our compliance program in your areas of responsibility, ensuring it is aligned with Camunda’s business model, our lean ways of working, and evolving regulatory requirements.
• Review, develop, and implement company‑wide policies, standards, and internal guidelines in collaboration with stakeholders, making sure they are understandable, practical, and scalable in a remote‑first environment. Monitor and respond to regulatory and market developments in your areas of expertise, and communicate in German and English with our DPO and the relevant legal authorities.
• Support due diligence activities and requests for customers, partners, vendors, and auditors.

What you bring

• Ability and/or willingness to use our product.
• Several years of hands‑on experience in privacy and/or broader compliance topics (e.g., AI governance/EU AI Act) in a technology, SaaS, or similarly fast‑moving environment. Strong hands-on experience negotiating and drafting privacy and data protection agreements (including DPAs, BAAs, HIPAA terms, and MSA privacy clauses) in support of global GTM activities.
• Substantial privacy and data‑protection background: Solid understanding of privacy and data‑protection frameworks (e.g., GDPR and comparable regimes), including practical experience designing or maintaining privacy programs such as policies and SOPs, DPIAs/ROPA, DSAR processes (including tooling like privacy management platforms), vendor/processor management, and privacy certifications (e.g., ISO 27018‑aligned controls).
• Business‑oriented, pragmatic mindset: Ability to translate complex legal and regulatory requirements into lean, risk‑based, and scalable solutions that support business goals rather than block them.
• Excellent communication skills: Very strong written and verbal communication skills in English; you can explain complex topics clearly to different audiences, including senior leaders and non‑legal stakeholders. Additional languages (e.g., German) are a plus.
• Project and stakeholder management: Experience driving projects from discovery to implementation, coordinating input from different teams and keeping work on track in a remote, async‑friendly setup – ideally including time‑bound projects.
• High level of integrity and ownership: You are comfortable taking end‑to‑end ownership for your areas of responsibility, dealing with sensitive topics and making well‑reasoned recommendations under time pressure.

Nice-to-haves

• Experience managing ESG and supply‑chain compliance programs, ideally including VSME reporting.
• Practical expertise in export control and export law, including assessing and managing related risks.
• Very good German language skills, enabling you to communicate confidently with our German DPO, German supervisory authorities, and review German legal provisions.

Come join us and be part of Camunda’s incredible journey: Make an impact at a pivotal moment in our story!

AI Disclaimer: Camunda may use AI tools to aid the screening of applications.