Cybersecurity GRC Analyst - Remote ISO/NIST Audits

Trimble Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Trimble Inc. is seeking a Cybersecurity GRC - Compliance Analyst to help ensure Trimble’s product portfolio aligns with ISO 27001, ISO 27701, SOC 2 and NIST 800-171.

You will be part of the global Cybersecurity team, coordinating with IT, product groups and external auditors. Responsibilities include gap analyses, internal and external audits, policy updates, and risk assessments, with six months project work and six months audit support.

Qualifications

• Relevant degree in Data Science, CS or Engineering.
• ISO 27001 Internal/Lead Auditor preferred.
• 2 years with ISO 27001/ISO 27701/SOC 2 and/or NIST 800-171.
• Proficiency in English.

Responsibilities

• Perform ISO 27001, ISO 27701, SOC 2 & NIST 800-171 gap analyses and recommend remediation.
• Improve compliance scope via enhancements to the Trimble Common Control Framework.
• Conduct ISO 27001 & ISO 27701 Internal Audits.
• Perform SOC 2 and NIST 800-171 Internal & External Audits.
• Contribute to policy revisions and IMS maintenance.
• Coordinate with business stakeholders and external auditors.
• Present metrics and risk trends to senior leadership.
• Develop processes to increase efficiency across standards.
• Collaborate with global cybersecurity teams and Trimble businesses.
• Support risk management to calculate and reduce business risk.
• Produce information demonstrating risk posture and drive action.

Skills

Security frameworks

Auditing

Risk management

Policy writing

Communication

Presentation skills

Decision making

Collaboration

Problem solving

Attention to detail

Education

Bachelor's degree in Data Science, Computer Science or Engineering

ISO 27001 Internal Lead Auditor (preferred)

SEC+, GSEC (preferred)

Tools

Jira Service Desk

Job description

Trimble Inc. is seeking a Cybersecurity GRC - Compliance Analyst to help ensure Trimble’s product portfolio aligns with ISO 27001, ISO 27701, SOC 2 and NIST 800-171.

You will be part of the global Cybersecurity team, coordinating with IT, product groups and external auditors. Responsibilities include gap analyses, internal and external audits, policy updates, and risk assessments, with six months project work and six months audit support.