Analyst Governance Risk & Compliance

trimble; USA; Remote; USD 90.000 - 130.000; Vollzeit

Zusammenfassung

Trimble is seeking a cybersecurity compliance professional to coordinate audits, assess controls, and improve processes for regulatory frameworks across an international product portfolio. The role emphasizes clear risk communication to technical and business stakeholders in a fully remote setting.

The position supports a global team, working with diverse time zones while maintaining a robust control framework and documentation to demonstrate compliance with ISO, SOC, and NIST standards.

Qualifikationen

• At least two years of experience with ISO 27001, ISO 27701, SOC 2, or NIST 800-171 in a large software environment.
• Ability to write policies and explain technical risks to diverse audiences.
• Experience collecting information from multiple sources and preparing clear reports.
• Familiarity with Windows and Linux/Unix, cloud platforms, scripting, and audit workflows.

Aufgaben

• Assess gaps against ISO 27001/27701, SOC 2, and NIST 800-171; recommend improvements.
• Conduct internal audits and assist audit activity with stakeholders and external auditors.
• Maintain and improve a shared control framework and integrated management system.
• Report audit results, risk trends, metrics, and corrective action plans to leadership.
• Improve compliance processes across frameworks and support risk assessment activities.
• Gather information from varied sources and present findings to audiences.

Kenntnisse

Security frameworks

Audits

Risk scoring

Gap analysis

Windows

Linux/Unix

Cloud platforms

Scripting

Splunk queries

Policy writing

Cross-functional communication

Ausbildung

Degree in CS/Engineering/Data science

Tools

Splunk

Jira Service Desk

Jobbeschreibung

Role overview

Help maintain cybersecurity compliance across a portfolio of products by assessing controls, coordinating audits, and improving the processes and documentation used to demonstrate compliance. The role combines project-based compliance work with audit activity and calls for clear communication of risk to technical and business stakeholders. It is a remote position based in Ukraine, working with an international cybersecurity team.

Responsibilities

• - Assess gaps against ISO 27001, ISO 27701, SOC 2, and NIST 800-171, then recommend practical process, documentation, or tooling improvements.
• - Conduct internal audits and support internal and external audit activity, coordinating with stakeholders and external auditors.
• - Maintain and improve a shared control framework, compliance scope, annual policies, and the integrated management system.
• - Report audit results, risk trends, metrics, and corrective action plans to senior leaders.
• - Improve compliance processes across frameworks and contribute to risk assessment and management activities.
• - Gather information from varied sources, evaluate business and technical risk, and present findings in a way suited to the audience.

Requirements

• - At least two years of experience with ISO 27001, ISO 27701, SOC 2, or NIST 800-171, plus experience in risk, information security, or systems administration in a large international software environment.
• - Working knowledge of security frameworks, control design, audits, risk scoring, and gap analysis.
• - Strong written and spoken English, with the ability to write policies and explain technical risks to different audiences.
• - Experience collecting and analyzing information from multiple sources and preparing clear reports.
• - Intermediate familiarity with Windows and Linux/Unix, major cloud platforms, scripting, and Splunk queries.
• - Organized, analytical, and adaptable, with the ability to work independently and collaborate across a global team.

Nice to have

• - A degree in data science, computer science, or engineering; ISO 27001 internal or lead auditor credentials or equivalent experience.
• - Security certifications such as Security+ or GSEC.
• - Experience with Jira Service Desk and using AI to reduce manual compliance work.