Senior Legal Counsel - Compliance; EMEA Main Focus

Join us for our upcoming webinar, How to Be a Leader, Not Just a Manager. A practical session with a powerhouse panel on leading modern, remote teams.

Register here!

Camunda is the leader in enterprise agentic automation, orchestrating complex business processes including high‑value knowledge work, across agents, people, and systems. By creating production‑ready, enterprise‑grade agents with built‑in governance, Camunda uniquely delivers trusted AI agents for business‑critical processes. Over 700 leading innovators like Atlassian, ING, and Vodafone rely on Camunda to slash time‑to‑value from months to days, boost operational efficiency, and elevate customer experiences.

Camunda was named a Visionary in the inaugural 2025 Gartner® Magic Quadrant™ for Business Orchestration and Automation Technologies (BOAT).

As a fully remote, global company, we’re rewriting the rules of modern business. Named GP Bullhound’s 2024 Top 100 Next Unicorn list, certified as a Great Place to Work, and recognized by Flexa for true flexibility, we’re growing fast and looking for top talent to join our team. If you’re excited to do meaningful work and make real impact, keep reading, this role could be the one you’ve been waiting for.

As Senior Legal Counsel – Compliance, you will join our global L&C team and lead Camunda’s approach to core compliance topics, including international privacy and data protection, AI governance, ESG and sustainability reporting, export control, human rights, and supply‑chain due diligence. You’ll be the go‑to advisor and business partner for these areas, working closely with teams across the company and supporting customer and procurement contract negotiations.

You will own and evolve our governance frameworks, policies, and ways of working, turning complex requirements into clear guidance that enables our remote‑first SaaS business to move quickly while staying compliant.

This role is an excellent fit if you thrive on end‑to‑end ownership and enjoy combining deep subject‑matter expertise with pragmatic advice and visible impact on our processes, product, and strategy.

• Serve as a trusted compliance partner to all teams across Camunda, providing clear and pragmatic guidance on topics such as privacy and data protection, AI governance, ESG and sustainability reporting, export/sanctions, and human‑rights checks in supply chain management.
• Act as a key privacy advisor to the Legal Go‑to‑Market (GTM) team, leading and supporting global negotiations on data protection and healthcare privacy matters, including Data Processing Agreements (DPAs), Business Associate Agreements (BAAs), HIPAA‑related terms, and other privacy provisions within Master Services Agreements (MSAs).
• Coordinate and manage cross‑functional projects with high business impact that involve compliance considerations, such as privacy management tooling and processes (including DSR and ROPA automation and incident response). Design and deliver targeted training and awareness initiatives.
• Independently maintain and further develop our compliance program in your areas of responsibility, ensuring it is aligned with Camunda’s business model, our lean ways of working, and evolving regulatory requirements.
• Review, develop, and implement company‑wide policies, standards, and internal guidelines in collaboration with stakeholders, making sure they are understandable, practical, and scalable in a remote‑first environment. Monitor and respond to regulatory and market developments in your areas of expertise, and communicate in German and English with our DPO and the relevant legal authorities.
• Support due diligence activities and requests for customers, partners, vendors, and auditors.

• Ability and/or willingness to use our product.
• Several years of hands‑on experience in privacy and/or broader compliance topics (e.g., AI governance/EU AI Act) in a technology, SaaS, or similarly fast‑moving environment. Strong hands‑on experience negotiating and drafting privacy and data protection agreements (including DPAs, BAAs, HIPAA terms, and MSA privacy clauses) in support of global GTM activities.
• Substantial…