Remote GRC Analyst - ISO/SOC2 Compliance Lead

trimble; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Trimble is seeking a cybersecurity compliance professional to coordinate audits, assess controls, and improve processes for regulatory frameworks across an international product portfolio. The role emphasizes clear risk communication to technical and business stakeholders in a fully remote setting.

The position supports a global team, working with diverse time zones while maintaining a robust control framework and documentation to demonstrate compliance with ISO, SOC, and NIST standards.

Qualifications

• At least two years of experience with ISO 27001, ISO 27701, SOC 2, or NIST 800-171 in a large software environment.
• Ability to write policies and explain technical risks to diverse audiences.
• Experience collecting information from multiple sources and preparing clear reports.
• Familiarity with Windows and Linux/Unix, cloud platforms, scripting, and audit workflows.

Responsibilities

• Assess gaps against ISO 27001/27701, SOC 2, and NIST 800-171; recommend improvements.
• Conduct internal audits and assist audit activity with stakeholders and external auditors.
• Maintain and improve a shared control framework and integrated management system.
• Report audit results, risk trends, metrics, and corrective action plans to leadership.
• Improve compliance processes across frameworks and support risk assessment activities.
• Gather information from varied sources and present findings to audiences.

Skills

Security frameworks

Audits

Risk scoring

Gap analysis

Windows

Linux/Unix

Cloud platforms

Scripting

Splunk queries

Policy writing

Cross-functional communication

Education

Degree in CS/Engineering/Data science

Tools

Splunk

Jira Service Desk

Job description

Trimble is seeking a cybersecurity compliance professional to coordinate audits, assess controls, and improve processes for regulatory frameworks across an international product portfolio. The role emphasizes clear risk communication to technical and business stakeholders in a fully remote setting.

The position supports a global team, working with diverse time zones while maintaining a robust control framework and documentation to demonstrate compliance with ISO, SOC, and NIST standards.